---
title: "Synacor: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/synacor/
description: "Every Synacor vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (10), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-08-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Synacor: known exploited vulnerabilities

- 2026-08-21 [CVE-2026-73570](https://erroneo.us/security/cve/CVE-2026-73570/index.md) Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (due 2026-08-24; ransomware: Unknown)
- 2026-04-20 [CVE-2025-48700](https://erroneo.us/security/cve/CVE-2025-48700/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (due 2026-04-23; ransomware: Unknown)
- 2026-03-18 [CVE-2025-66376](https://erroneo.us/security/cve/CVE-2025-66376/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability (due 2026-04-01; ransomware: Unknown)
- 2026-02-17 [CVE-2020-7796](https://erroneo.us/security/cve/CVE-2020-7796/index.md) Synacor Zimbra Collaboration Suite: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability (due 2026-03-10; ransomware: Unknown)
- 2026-01-22 [CVE-2025-68645](https://erroneo.us/security/cve/CVE-2025-68645/index.md) Synacor  Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability (due 2026-02-12; ransomware: Unknown)
- 2025-10-07 [CVE-2025-27915](https://erroneo.us/security/cve/CVE-2025-27915/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (due 2025-10-28; ransomware: Unknown)
- 2025-07-07 [CVE-2019-9621](https://erroneo.us/security/cve/CVE-2019-9621/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability (due 2025-07-28; ransomware: Unknown)
- 2025-05-19 [CVE-2024-27443](https://erroneo.us/security/cve/CVE-2024-27443/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (due 2025-06-09; ransomware: Unknown)
- 2025-02-25 [CVE-2023-34192](https://erroneo.us/security/cve/CVE-2023-34192/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (due 2025-03-18; ransomware: Unknown)
- 2024-10-03 [CVE-2024-45519](https://erroneo.us/security/cve/CVE-2024-45519/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability (due 2024-10-24; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/synacor/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt