Synacor

CVEs currently on EVULNABLE's Priority Feed for Synacor, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

May

Jun

Jul

Aug

Sep

Oct

Not ransomware-linked
Ransomware-linked
This week (so far)

CISA KEV additions per week, last 26 weeks
Week of	Added to KEV	Ransomware-linked
2026-04-20	1	0
2026-04-27	0	0
2026-05-04	0	0
2026-05-11	0	0
2026-05-18	0	0
2026-05-25	0	0
2026-06-01	0	0
2026-06-08	0	0
2026-06-15	0	0
2026-06-22	0	0
2026-06-29	0	0
2026-07-06	0	0
2026-07-13	0	0
2026-07-20	0	0
2026-07-27	0	0
2026-08-03	0	0
2026-08-10	0	0
2026-08-17	1	0
2026-08-24	0	0
2026-08-31	0	0
2026-09-07	0	0
2026-09-14	0	0
2026-09-21	0	0
2026-09-28	0	0
2026-10-05	0	0
2026-10-12 (so far)	0	0

In EVULNABLE's ranked feed

Showing all 19 Synacor CVEs in EVULNABLE's ranked feed.

#1 93 Immediate CVE-2022-41352 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS95.5% · 99.87th pctlKEV since2022-10-20

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#2 92 Immediate CVE-2022-37042 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

EVRS 92/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS91.9% · 99.82nd pctlKEV since2022-08-11

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#3 90 Immediate CVE-2022-27925 KEV since 2022 · listed over a yearRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

EVRS 90/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS98.7% · 99.92nd pctlKEV since2022-08-11

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#4 89 Immediate CVE-2022-27924 KEV since 2022 · listed over a yearRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

EVRS 89/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS93.9% · 99.85th pctlKEV since2022-08-04

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#5 87 Immediate CVE-2019-9670 ExigentKEV since 2022 · listed over a yearCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.98th pctlKEV since2022-01-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#6 87 Immediate CVE-2024-45519 ExigentKEV since 2024 · listed over a yearCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2024-10-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#7 86 Immediate CVE-2020-7796 CISA federal deadline · Overdue by 7 monthsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

EVRS 86/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS84.4% · 99.7th pctlKEV since2026-02-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.844.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#8 83 Urgent CVE-2026-73570 CISA federal deadline · Overdue by 54 daysCISA KEV Synacor — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.9 (NVD)EPSS71.7% · 99.42nd pctlKEV since2026-08-21

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.717.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#9 81 Urgent CVE-2023-34192 KEV since 2025 · listed over a yearCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.0 (NVD)EPSS77.3% · 99.55th pctlKEV since2025-02-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.773.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#10 80 Urgent CVE-2019-9621 KEV since 2025 · listed over a yearCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS81.0% · 99.63rd pctlKEV since2025-07-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.810.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#11 75 Urgent CVE-2023-37580 KEV since 2023 · listed over a yearCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability