Skip to content
Threat Feed
Subscribe

Product

Zimbra Collaboration Suite (ZCS)

3 briefs RSS
critical threat

Critical Vulnerabilities in Synacor Zimbra Collaboration

Synacor Zimbra Collaboration versions prior to 10.1.20 are vulnerable to multiple flaws, including actively exploited RCE (CVE-2026-73570), SSRF, and XSS, posing a high risk of unauthorized system access.

exploited PoC Zimbra Collaboration +1
1t 1c updated
critical threat

Russian State-Backed 'LAUNDRY BEAR' Exploits Zimbra Zero-Click Vulnerability

The Russian state-supported threat group LAUNDRY BEAR is exploiting a zero-click vulnerability, dubbed 'beehive,' in the Zimbra Collaboration Suite (ZCS) webmail service, actively stealing sensitive emails and gaining persistent access to compromised networks since July 2025 by merely viewing a malicious email, with Western organizations across various sectors being targeted.

Zimbra Collaboration Suite LAUNDRY BEAR phishing zero-click espionage state-sponsored zimbra email-theft
3t
medium advisory

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability in Synacor Zimbra Collaboration Suite (ZCS) could allow attackers to execute arbitrary JavaScript within a user's session, potentially leading to unauthorized access to sensitive information.

Zimbra Collaboration Suite xss vulnerability zimbra
2r 1t 1c