VulnSocial

CVE-2022-41352General(synacor / zimbra_collaboration_suite)

LOWCVSS 9.8 · CRITICALCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for synacor zimbra_collaboration_suite systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

synacor CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-11-10. Apply updates per vendor instructions.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zimbra_collaboration_suite

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-26); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
synacor
Products
zimbra_collaboration_suite

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-26: 1Mentions · 2026-09-09: 1Active Exploitation · 2026-09-09: 108-2609-09
Signal classification2 categories
General
150.0%
Active Exploitation
150.0%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-08-261
General1
2026-09-091
Active Exploitation1
Full discourse2 posts
  • kokumօtօ@__kokumoto
    Active Exploitation

    米国サイバーセキュリティ・社会基盤安全保障庁(CISA)の既知の悪用された脆弱性カタログが更新。以下の脆弱性についてランサムウェアによる悪用が確認された。 - CVE-2022-41352 (Zimbra Collaboration Suite (ZCS)) - CVE-2016-7255 (Windows) - CVE-2019-0859 (Windows) https://t.co/VS1Zw6lLLO

    Post summary

    CISA updated its catalog of known exploited vulnerabilities, noting confirmed ransomware activity against CVE-2022-41352, CVE-2016-7255, and CVE-2019-0859.

    00022773
    7.8K followersView on X
  • nksistemas@nksistemas
    General

    Explotación Crítica en Zimbra: CVE-2022-41352 y el Riesgo de RCE https://nksistemas.com/explotacion-critica-en-zimbra-cve-2022-41352-y-el-riesgo-de-rce/

    Post summary

    The provided text offers only a headline and link hinting at a critical RCE in Zimbra, lacking any concrete evidence of a PoC, active exploitation, or mitigation details.

    02010193
    6.2K followersView on X
CPE platform detail63 entries

63 of 63 entries

PartVendorProductVersionTarget SWTarget HW
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite8.8.15--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--
Appsynacorzimbra_collaboration_suite9.0.0--

Explore more

Back to dashboardsynacor CVEszimbra_collaboration_suite vulnerabilities