Synacor: every exploited CVE on CISA KEV
All 19 Synacor bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
19
Synacor bugs on CISA’s exploited list
5 added in 2026.
6
are linked to ransomware
Every Synacor vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-08-21 | CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 0.72 | 0.98 | Nuclei · Suricata | No |
| 2026-04-20 | CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-03-18 | CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 0.20 | 0.56 | None yet | No |
| 2026-02-17 | CVE-2020-7796 | Synacor Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 0.94 | 0.98 | Nuclei · Suricata | No |
| 2026-01-22 | CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | 0.49 | 0.98 | Nuclei · Suricata | No |
| 2025-10-07 | CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 0.04 | 0.99 | Nuclei · Suricata | No |
| 2025-07-07 | CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 0.81 | 0.98 | Nuclei · Suricata | No |
| 2025-05-19 | CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 0.25 | 0.98 | Nuclei · Suricata | No |
| 2025-02-25 | CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 0.77 | 0.99 | Nuclei · Suricata | No |
| 2024-10-03 | CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 1.00 | 0.98 | None yet | No |
| 2023-07-27 | CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 0.49 | 0.98 | Nuclei · Suricata | No |
| 2023-04-03 | CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 0.18 | 0.98 | Nuclei · Suricata | No |
| 2022-10-20 | CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 0.95 | 0.99 | Nuclei · Suricata | Yes |
| 2022-08-11 | CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 0.92 | 0.99 | Nuclei · Suricata | Yes |
| 2022-08-11 | CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | Yes |
| 2022-08-04 | CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 0.94 | 0.99 | Nuclei · Suricata | Yes |
| 2022-04-19 | CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 0.30 | 0.98 | Nuclei · Suricata | Yes |
| 2022-02-25 | CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 0.31 | 0.98 | Nuclei · Suricata | Yes |
| 2022-01-10 | CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 1.00 | 0.98 | Nuclei · Suricata | No |
Industry partners
