CISA KEV by vendor
Synacor vulnerabilities in the CISA KEV catalogue
19 Synacor entries in CISA's Known Exploited Vulnerabilities catalogue, 6 of them (32 percent) known to have been used in ransomware campaigns. First added 10 January 2022, latest 21 August 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
19entries, 1.1% of the catalogue
6known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| Zimbra Collaboration Suite (ZCS) | 17 |
| Zimbra Collaboration Suite | 1 |
| Zimbra Collaborate Suite (ZCS) | 1 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 | Unknown | 8.9 High | 71.6% | Not auto, total | 3 days + triage |
| CVE-2025-48700 | Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | Unknown | 6.1 Medium | 1.7% | Not auto, partial | 14 days |
| CVE-2025-66376 | Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 | Unknown | 6.1 Medium | 20.2% | Not auto, partial | 14 days |
| CVE-2020-7796 | Zimbra Collaboration Suite | 2026-02-17 | 2026-03-10 | Unknown | 9.8 Critical | 93.5% | Auto, total | 3 days + triage |
| CVE-2025-68645 | Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 2026-02-12 | Unknown | 8.8 High | 48.8% | Not auto, total | 3 days + triage |
| CVE-2025-27915 | Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 2025-10-28 | Unknown | 5.4 Medium | 4.0% | Not auto, total | 3 days + triage |
| CVE-2019-9621 | Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 2025-07-28 | Unknown | 7.5 High | 81.0% | Auto, partial | 3 days |
| CVE-2024-27443 | Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 2025-06-09 | Unknown | 6.1 Medium | 24.6% | Not auto, total | 3 days + triage |
| CVE-2023-34192 | Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 2025-03-18 | Unknown | 9.0 Critical | 77.2% | Not auto, total | 3 days + triage |
| CVE-2024-45519 | Zimbra Collaboration Suite (ZCS) | 2024-10-03 | 2024-10-24 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
All 19 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 | Unknown | 8.9 High | 71.6% | Not auto, total | 3 days + triage |
| CVE-2025-48700 | Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | Unknown | 6.1 Medium | 1.7% | Not auto, partial | 14 days |
| CVE-2025-66376 | Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 | Unknown | 6.1 Medium | 20.2% | Not auto, partial | 14 days |
| CVE-2020-7796 | Zimbra Collaboration Suite | 2026-02-17 | 2026-03-10 | Unknown | 9.8 Critical | 93.5% | Auto, total | 3 days + triage |
| CVE-2025-68645 | Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 2026-02-12 | Unknown | 8.8 High | 48.8% | Not auto, total | 3 days + triage |
| CVE-2025-27915 | Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 2025-10-28 | Unknown | 5.4 Medium | 4.0% | Not auto, total | 3 days + triage |
| CVE-2019-9621 | Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 2025-07-28 | Unknown | 7.5 High | 81.0% | Auto, partial | 3 days |
| CVE-2024-27443 | Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 2025-06-09 | Unknown | 6.1 Medium | 24.6% | Not auto, total | 3 days + triage |
| CVE-2023-34192 | Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 2025-03-18 | Unknown | 9.0 Critical | 77.2% | Not auto, total | 3 days + triage |
| CVE-2024-45519 | Zimbra Collaboration Suite (ZCS) | 2024-10-03 | 2024-10-24 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2023-37580 | Zimbra Collaboration Suite (ZCS) | 2023-07-27 | 2023-08-17 | Unknown | 6.1 Medium | 49.0% | Not auto, partial | 14 days |
| CVE-2022-27926 | Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 2023-04-24 | Unknown | 6.1 Medium | 17.6% | Not auto, partial | 14 days |
| CVE-2022-41352 | Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 2022-11-10 | Known | 9.8 Critical | 95.4% | Auto, total | 3 days + triage |
| CVE-2022-37042 | Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 | Known | 9.8 Critical | 92.0% | Auto, total | 3 days + triage |
| CVE-2022-27925 | Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 | Known | 7.2 High | 98.6% | Auto, total | 3 days + triage |
| CVE-2022-27924 | Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 2022-08-25 | Known | 7.5 High | 93.9% | Auto, total | 3 days + triage |
| CVE-2018-6882 | Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 2022-05-10 | Known | 6.1 Medium | 29.7% | Not auto, total | 3 days + triage |
| CVE-2022-24682 | Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 2022-03-11 | Known | 6.1 Medium | 30.9% | Not auto, partial | 14 days |
| CVE-2019-9670 | Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 2022-07-10 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Synacor in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.
