ZC
Product
Zimbra Collaboration Suite (ZCS)
by Synacor · last CVE Aug 13, 2026
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
17
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 7Low 0
Watch

Add Zimbra Collaboration Suite (ZCS) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73570
In wildKEV
8.9
72%
Aug 13
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Affected: All versions, or not specified
CVE-2025-68645
In wildKEV
8.8
49%
Dec 22
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Affected: All versions, or not specified
CVE-2022-27924
RansomwareIn wildKEV
7.5
94%
Apr 20
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Affected: All versions, or not specified
CVE-2019-9621
In wildKEV
7.5
81%
Apr 30
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
Affected: All versions, or not specified
CVE-2022-27925
RansomwareIn wildKEV
7.2
99%
Apr 20
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Affected: All versions, or not specified
CVE-2022-3569
7.8
1%
Oct 17
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra'…
Affected: 9.0.0 through 9.0.0
Showing 6