netVigilance Vulnerability intelligence since 2004

Synacor

19 Synacor vulnerabilities with confirmed exploitation in the wild, as published by CISA; 19 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Synacor
Vulnerability Status
overdue 17d2026-08-24 CVE-2026-73570 Synacor / Zimbra Collaboration Suite (ZCS) Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability 2026-08-21 8.9 past due
overdue 140d2026-04-23 CVE-2025-48700 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2026-04-20 6.1 past due
overdue 162d2026-04-01 CVE-2025-66376 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability 2026-03-18 6.1 past due
overdue 184d2026-03-10 CVE-2020-7796 Synacor / Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability 2026-02-17 9.8 past due
overdue 210d2026-02-12 CVE-2025-68645 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability 2026-01-22 8.8 past due
overdue 317d2025-10-28 CVE-2025-27915 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2025-10-07 5.4 past due
overdue 409d2025-07-28 CVE-2019-9621 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability 2025-07-07 7.5 past due
overdue 458d2025-06-09 CVE-2024-27443 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-05-19 6.1 past due
overdue 541d2025-03-18 CVE-2023-34192 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-02-25 9.0 past due
overdue 686d2024-10-24 CVE-2024-45519 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability 2024-10-03 9.8 past due
overdue 1120d2023-08-17 CVE-2023-37580 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2023-07-27 6.1 past due
overdue 1235d2023-04-24 CVE-2022-27926 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2023-04-03 6.1 past due
overdue 1400d2022-11-10 CVE-2022-41352 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability 2022-10-20 9.8 past dueransomware
overdue 1470d2022-09-01 CVE-2022-37042 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability 2022-08-11 9.8 past dueransomware
overdue 1470d2022-09-01 CVE-2022-27925 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability 2022-08-11 7.2 past dueransomware
overdue 1477d2022-08-25 CVE-2022-27924 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability 2022-08-04 7.5 past dueransomware
overdue 1584d2022-05-10 CVE-2018-6882 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2022-04-19 6.1 past dueransomware
overdue 1644d2022-03-11 CVE-2022-24682 Synacor / Zimbra Collaborate Suite (ZCS) Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability 2022-02-25 6.1 past dueransomware
overdue 1523d2022-07-10 CVE-2019-9670 Synacor / Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference 2022-01-10 9.8 past due