KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Product / Synacor

Synacor Zimbra Collaboration Suite (ZCS) in CISA KEV

Catalog
2026.09.23
Vendor
Synacor
Updated
2026-08-21

Answer CISA's KEV catalog lists 16 vulnerabilities in Synacor Zimbra Collaboration Suite (ZCS) as of catalog 2026.09.23, 84.2% of Synacor's 19 entries. First added 2022-01-10, latest 2026-08-21; 5 ransomware-linked.

KEV entries
16
Ransomware: known
531.2%
First added
2022-01-10
Latest added
2026-08-21
Median days to due
21
Open deadlines
0federal

TAdditions by year

Synacor Zimbra Collaboration Suite (ZCS) KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 0; 2022: 6; 2023: 2; 2024: 1; 2025: 4; 2026: 3.02462021: 0 added20212022: 6 added620222023: 2 added220232024: 1 added120242025: 4 added420252026: 3 added (year to date)32026
Synacor Zimbra Collaboration Suite (ZCS) KEV additions by year
YearAdded
20210
20226
20232
20241
20254
20263

WWeaknesses

CWEs in Synacor Zimbra Collaboration Suite (ZCS) KEV entries
CWEEntriesShare
CWE-79 Cross-site scripting (XSS)850%
CWE-22 Path traversal212.5%
CWE-78 OS command injection16.2%
CWE-918 Server-side request forgery16.2%
CWE-80716.2%
CWE-284 Improper access control16.2%
CWE-13816.2%
CWE-23 Relative path traversal16.2%

EAll entries

Synacor Zimbra Collaboration Suite (ZCS) entries in CISA KEV
CVEVulnerabilityAddedDueRansomwareCWE
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityUnknownCWE-79
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityUnknownCWE-79
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityUnknownCWE-79
CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityUnknownCWE-918, CWE-807
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityUnknownCWE-79
CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityUnknownCWE-79
CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityUnknownCWE-284
CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityUnknownCWE-79
CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityUnknownCWE-79, CWE-138
CVE-2022-41352Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKnownCWE-22
CVE-2022-37042Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityKnownCWE-23
CVE-2022-27925Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKnownCWE-22
CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityKnownCWE-93
CVE-2018-6882Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKnownCWE-79
CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceUnknownCWE-611

Cite this

CISA's KEV catalog lists 16 vulnerabilities in Synacor Zimbra Collaboration Suite (ZCS). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/products/synacor-zimbra-collaboration-suite-zcs/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API