HighVulnerabilityupdated 30 Oct 2026, 14:17 UTC

Synacor Zimbra: multiple vulnerabilities allow XSS, code execution, data disclosure

Official source

Severity	HighVulnerability
Being exploited?	UnclearNo reports either way yet
Fix available?	UnclearNo fixed version published in the sources yet
How sure is this?	Official sourceBacked by an official source

Timeline

30 Oct 2026, 14:15 UTC
Publicly disclosed
30 Oct 2026, 14:15 UTC
Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
30 Oct 2026, 14:17 UTC
Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

[UPDATE] [hoch] Synacor Zimbra: Mehrere SchwachstellenCERT-Bund (BSI) · 30 Oct 2026, 14:15 UTC

Technical details

ID: ZR-baaae1b1
Disclosed: 30 Oct 2026, 14:15 UTC
On Zero Radar: 30 Oct 2026, 14:17 UTC (2 min after disclosure)
Last change: 30 Oct 2026, 14:17 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

Synacor Zimbra: multiple vulnerabilities allow XSS, code execution, data disclosure · Zero Radar