Synacor

19 Synacor flaws are on CISA's list of vulnerabilities attackers have used, 5 of them added in 2026. CISA says 6 are known to be used by ransomware. The latest was added Aug 21, 2026.

19on CISA's list, all time

5added in 2026

1in the last 90 days

6used by ransomware

3zero-days, all time

Add Synacor to my stack

Exploited flaws added each year

20210
20227
20232
20241
20254
2026 so far5

Most-hit products

Product	Exploited flaws	Most recent
Zimbra Collaboration Suite (ZCS)	16	Aug 21, 2026
Zimbra Collaboration Suite	1	Feb 17, 2026
Zimbra Collaboration Suite (ZCS)	1	Jan 22, 2026
Zimbra Collaborate Suite (ZCS)	1	Feb 25, 2022

Latest Synacor flaws

Zimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityCVE-2026-73570 · Aug 21, 2026
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCVE-2025-48700 · Apr 20, 2026
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityCVE-2025-66376 · Mar 18, 2026
Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilityCVE-2020-7796 · Feb 17, 2026
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCVE-2025-68645 · Jan 22, 2026
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCVE-2025-27915 · Oct 7, 2025
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityCVE-2019-9621 · Jul 7, 2025
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCVE-2024-27443 · May 19, 2025
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCVE-2023-34192 · Feb 25, 2025
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityCVE-2024-45519 · Oct 3, 2024 · zero-day
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCVE-2023-37580 · Jul 27, 2023 · zero-day
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCVE-2022-27926 · Apr 3, 2023
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityCVE-2022-41352 · Oct 20, 2022 · ransomware
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityCVE-2022-27925 · Aug 11, 2022 · ransomware
Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityCVE-2022-37042 · Aug 11, 2022 · zero-day · ransomware

Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.