VulnSocial

CVE-2026-33372Disclosure(synacor / zimbra_collaboration_suite)

LOWCVSS 5.4 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for synacor zimbra_collaboration_suite systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expected request header. An attacker can exploit this issue by tricking an authenticated user into submitting a crafted request. This may allow unauthorized actions to be performed on behalf of the victim.

synacor CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-352

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zimbra_collaboration_suite

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
synacor
Products
zimbra_collaboration_suite

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-22: 1Mentions · 2026-07-24: 1Active Exploitation · 2026-07-24: 1Technical Details · 2026-03-22: 1Technical Details · 2026-07-24: 103-2207-24
Signal classification2 categories
Disclosure
150.0%
Active Exploitation
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-03-221
Disclosure1
2026-07-241
Active Exploitation1
Full discourse2 posts
  • Cephas@Cephas_PM
    Active Exploitation

    new zimbra cve in the wild CVE-2025-27915, which was exploited in the wild using a malicious ICS file to execute arbitrary Js in users sessions CVE-2026-33372 is a crosssite request forgery vuln act fast and patch the govt zimbra servers ama someone will h... @ICTAuthorityKE

    Post summary

    The post reports that CVE-2025-27915 is being exploited in the wild via malicious files, while CVE-2026-33372 is identified as a CSRF vulnerability, but provides no PoC, exploit code, or specific patch information.

    0000057
    17 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-33372 An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper valida… https://www.cve.org/CVERecord?id=CVE-2026-33372

    Post summary

    The text announces a CSRF vulnerability (CVE-2026-33372) in Zimbra Collaboration 10.0/10.1, providing basic technical details but no PoC, exploit, or mitigation information.

    00000176
    56.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsynacorzimbra_collaboration_suite---

Explore more

Back to dashboardsynacor CVEszimbra_collaboration_suite vulnerabilities