Skip to content
eastbaycyber
KEV by vendor

Synacor: CISA KEV History

Every Synacor vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.

Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard

KEV entries
19
Added, last 12 months
6
Ransomware-linked
5
Latest addition
2026-08-21

Synacor KEV additions per month, last 24 months

2024-10: 1 added124/102024-11: 0 added2024-12: 0 added2025-01: 0 added25/012025-02: 1 added12025-03: 0 added2025-04: 0 added25/042025-05: 1 added12025-06: 0 added2025-07: 1 added125/072025-08: 0 added2025-09: 0 added2025-10: 1 added125/102025-11: 0 added2025-12: 0 added2026-01: 1 added126/012026-02: 1 added12026-03: 1 added12026-04: 1 added126/042026-05: 0 added2026-06: 0 added2026-07: 0 added26/072026-08: 1 added12026-09: 0 added

Most-listed products: Zimbra Collaboration Suite (ZCS), Zimbra Collaboration Suite, Zimbra Collaborate Suite (ZCS).

Latest 19 of 19 Synacor KEV entries

CVEVulnerabilityAddedRansomware
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability2026-08-21No
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability2026-04-20No
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability2026-03-18No
CVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability2026-02-17No
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability2026-01-22No
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability2025-10-07No
CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability2025-07-07No
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability2025-05-19No
CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability2025-02-25No
CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability2024-10-03No
CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability2023-07-27No
CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability2023-04-03No
CVE-2022-41352Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability2022-10-20No
CVE-2022-27925Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability2022-08-11Yes
CVE-2022-37042Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability2022-08-11Yes
CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability2022-08-04Yes
CVE-2018-6882Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability2022-04-19Yes
CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability2022-02-25Yes
CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Refer2022-01-10No

CVE links go to our explainer when one exists, otherwise to the NVD record.

Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.