PatchTheCVEsynacor vulnerabilities
Recent CVEs affecting synacor products. 7 tracked.
synacor has 7 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2026-08-13. Highest priority: CVE-2026-73570 (score 91/100).
- CVE-2026-73571 LOW 3.1 UPGRADE An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper auth
- CVE-2026-73572 MEDIUM 6.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the
- CVE-2026-73573 LOW 3.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase do
- CVE-2026-73574 LOW 3.1 UPGRADE In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classi
- CVE-2026-73575 LOW 3.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the
- CVE-2026-73576 MEDIUM 6.3 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the On
- CVE-2026-73570 HIGH 8.9 EXPLOITED UPGRADE Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
FAQ
How do I fix synacor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is synacor being exploited right now?
Yes: 1 synacor CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which synacor CVE should I patch first?
CVE-2026-73570 currently ranks highest (91/100): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability.