s
synacor
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 91 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 2013 to present
91
Total CVEs
33
Critical+High
21
Exploited
30
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
30
Critical/High
Risk Level
54/100
medium
⚠️ 21 Active Exploits⚡ 3 Zero-Days📈 1 in Last 30 Days
Severity Distribution
Critical
13High
20Medium
56Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
8Age Distribution
Common Weaknesses (CWE)
1
XSS
42
2
CSRF
6
3
Path Traversal
5
4
XEE
4
5
SSRF
4
Most Affected Products
1. Synacor Zimbra Collaboration Suite1530
2. Zimbra Collaboration118
3. Zimbra Collaboration Server36
4. Zimbra Zimbra Collaboration Suite24
5. Synacor Zimbra Collaboration Suite (ZCS)16
Recent Vulnerabilities
See more →CVE-2026-73570
CVSS 8.9high
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Aug 13, 2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-says-zimbra-flaw-now-exploited-over-10k-servers-vulnerable/
unknown
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
Apr 24, 2026⚠ Exploited🔧 No Patch
CVE-2026-33373
CVSS 8.8high
Mar 30, 2026🔧 No Patch
CVE-2026-33370
CVSS 6.1EPSS 0%medium
Mar 20, 2026🔧 No Patch
CVE-2026-33371
CVSS 4.3EPSS 0%medium
Mar 20, 2026🔧 No Patch
CVE-2026-33369
CVSS 4.3EPSS 0%medium
Mar 20, 2026🔧 No Patch
CVE-2026-33372
CVSS 5.4EPSS 0%medium
Mar 20, 2026🔧 No Patch
CVE-2026-33368
CVSS 6.1EPSS 0%medium
Mar 20, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-zimbra-xss-flaw-exploited-in-attacks/
unknown
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
Mar 18, 2026⚠ Exploited🔧 No Patch
CVE-2025-66376
CVSS 7.2high
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Jan 5, 2026⚠ Exploited🔧 No Patch
Monitor synacor in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.