VulnSocial

CVE-2022-27926Active Exploitation(synacor / zimbra_collaboration_suite)

LOWCVSS 6.1 · MEDIUMCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for synacor zimbra_collaboration_suite systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.

synacor CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-04-24. Apply updates per vendor instructions.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zimbra_collaboration_suite

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
synacor
Products
zimbra_collaboration_suite

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-02: 1Active Exploitation · 2026-02-02: 1Technical Details · 2026-02-02: 102-02
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • CrowdSec@Crowd_Security
    Active Exploitation

    🚨 This week’s CrowdSec Threat Alert article highlights CVE-2025-68645 (LFI) and CVE-2022-27926 (XSS), actively exploited in the wild against Zimbra Collaboration servers. Explore attack details, threat trends, and mitigation steps in the article 👉 https://www.crowdsec.net/vulntracking-report/zimbra-collaboration-coordinated-attack #CVE #CVE202568645 #CVE202227926 #threatalert #cybersecurity

    Post summary

    The tweet reports that CVE‑2025‑68645 (LFI) and CVE‑2022‑27926 (XSS) are actively exploited in the wild against Zimbra Collaboration servers, directing readers to a CrowdSec Threat Alert article detailing attack trends and mitigation steps.

    01020312
    19.6K followersView on X
CPE platform detail24 entries

24 of 24 entries

PartVendorProductVersionTarget SWTarget HW
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--

Explore more

Back to dashboardsynacor CVEszimbra_collaboration_suite vulnerabilities