[NEW] [high] Synacor Zimbra: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Synacor Zimbra to execute arbitrary code, perform cross-site scripting attacks, bypass security measures, disclose confidential information, and carry out unauthorized actions.
CSIRTS triage
- What
- Multiple vulnerabilities in Synacor Zimbra can be exploited to execute arbitrary code and perform various attacks.
- Who is affected
- Users and administrators of Synacor Zimbra.
- Urgency
- Remediation is high priority due to the potential for severe exploitation.
- Action
- Review the advisory and apply the necessary updates.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Zimbra
Get an email when a new Zimbra advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2429
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-10631 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-50054 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-50055 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for Synacor Zimbra
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[NEW] [high] Synacor Zimbra Classic Web Client: Vulnerability allows cross-site scriptingcert-bund · 2026-07-07
- unknownVulnerability in Synacor Zimbra Collaboration (July 7, 2026)cert-fr-avis · 2026-07-07
- criticalexploitedCVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerabilitycisa-kev · 2026-04-20
- criticalexploitedCVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerabilitycisa-kev · 2026-03-18
- criticalexploitedCVE-2020-7796: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerabilitycisa-kev · 2026-02-17
- criticalexploitedCVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerabilitycisa-kev · 2026-01-22
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-31