Synacor
CPE vendor key: synacor ·
25 CVEs published in the last 24 months.
CVEs (365 d)
9
▲ +1 vs prior 30d
Avg CVSS (365 d)
6.66
over 9 CVEs
Avg EPSS pct (365 d)
0.36
higher = more likely exploited
KEV hit rate (365 d)
33.3%
3 of 9 added to CISA KEV
LLM-credited CVEs
0
none detected
Monthly CVE volume — last 24 months
Each point is one calendar month. Bars in the
severity card to the right slice the same volume by CVSS band.
Severity mix
Stacked by CVSS band (Critical / High / Medium /
Low) using the best available metric per CVE.
Top affected products (24 mo)
25
Distinct CVEs that include each product in their
CPE configuration.
Top CWEs (24 mo)
14
3
2
1
1
1
1
1
1
Distinct CVEs assigned each weakness.
Recent CISA KEV adds (last 12 months)
| Added | CVE | Product | KEV name |
|---|---|---|---|
| 2026-08-21 | CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability |
| 2026-04-20 | CVE-2025-48700 | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
| 2026-03-18 | CVE-2025-66376 | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability |
| 2026-02-17 | CVE-2020-7796 | Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability |
| 2026-01-22 | CVE-2025-68645 | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
| 2025-10-07 | CVE-2025-27915 | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
Filtered to KEV entries whose CISA vendor or product name matches this
vendor exactly, to drop cross-OS noise (e.g. third-party Windows apps
that CPE-map to Microsoft).
Generated 23 August 2026 00:24 UTC .