Synacor
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Zimbra Collaboration | 2 | – | Oct 29, 2026 |
| Zimbra Collaboration Suite (ZCS) | 1 | – | Oct 17, 2022 |
| Zimbra Server | 1 | – | Aug 16, 2022 |
Exploited and recent CVEs
- CVE-2026-66912 Stored Cross-Site Scripting in Zimbra 0.5%
- CVE-2026-66911 Stored Cross-Site Scripting in Zimbra 0.5%
- CVE-2022-3569 Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively c 0.8%
- CVE-2022-37393 Zimbra zmslapd arbitrary module load 1.7%