Vendor

Synacor

Follow SynacorFree accountCovers every Synacor product. No need to list them.

19 known exploited

Synacor news

HighPatchExploitedCISA KEV

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and mitigation guidance.

Why it matters

CISA lists this as exploited in the wild. Unpatched Zimbra Collaboration Suite (ZCS) systems are exposed to active attacks now.

Patch

Apply the vendor's security update for Zimbra Collaboration Suite (ZCS).

Microsoft Security Blog & MSRC · 3 sources

Vendor advisoryMicrosoft Security Blog & MSRC
Original reportingThe Hacker News
Additional reportingSecurityWeek

6 days agoDevelopersSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

AdvisoryKEVSep 30, 2026
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Basis: Microsoft Security Blog & MSRC (vendor advisory)

Actively exploited

All 19 →

CVE-2026-73570CVSS 8.9

Synacor Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Added Aug 21, 2026Fed. due Aug 24, 2026Coverage →

CVE-2025-48700CVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Added Apr 20, 2026Fed. due Apr 23, 2026

CVE-2025-66376CVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Added Mar 18, 2026Fed. due Apr 1, 2026

CVE-2020-7796CVSS 9.8

Synacor Zimbra Collaboration Suite

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Added Feb 17, 2026Fed. due Mar 10, 2026

CVE-2025-68645CVSS 8.8

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Added Jan 22, 2026Fed. due Feb 12, 2026

CVE-2025-27915CVSS 5.4

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Added Oct 7, 2025Fed. due Oct 28, 2025

CVE-2019-9621CVSS 7.5

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Added Jul 7, 2025Fed. due Jul 28, 2025

CVE-2024-27443CVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added May 19, 2025Fed. due Jun 9, 2025

CVE-2023-34192CVSS 9.0

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added Feb 25, 2025Fed. due Mar 18, 2025

CVE-2024-45519CVSS 9.8

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Added Oct 3, 2024Fed. due Oct 24, 2024

CVE-2023-37580CVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added Jul 27, 2023Fed. due Aug 17, 2023

CVE-2022-27926CVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added Apr 3, 2023Fed. due Apr 24, 2023

CVE-2022-41352RansomwareCVSS 9.8

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Added Oct 20, 2022Fed. due Nov 10, 2022

CVE-2022-37042RansomwareCVSS 9.8

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Added Aug 11, 2022Fed. due Sep 1, 2022

CVE-2022-27925RansomwareCVSS 7.2

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Added Aug 11, 2022Fed. due Sep 1, 2022

CVE-2022-27924RansomwareCVSS 7.5

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Added Aug 4, 2022Fed. due Aug 25, 2022

CVE-2018-6882RansomwareCVSS 6.1

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added Apr 19, 2022Fed. due May 10, 2022

CVE-2022-24682RansomwareCVSS 6.1

Synacor Zimbra Collaborate Suite (ZCS)

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Added Feb 25, 2022Fed. due Mar 11, 2022

CVE-2019-9670CVSS 9.8

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Added Jan 10, 2022Fed. due Jul 10, 2022

Products

Zimbra Collaboration Suite (ZCS) · 17 KEV Zimbra Collaborate Suite (ZCS) · 1 KEV Zimbra Collaboration Suite · 1 KEV