CVE-2025-66376 CISA KEV · Actively exploited
Cross-site scripting in Synacor Zimbra Collaboration Suite
CVSS score
6.1
EPSS probability
%20.2
Risk score
2.5
Published
9 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves the
Similar Vulnerabilities
9.8
CVE-2022-41352 Actively exploitedPath traversal in N/a
Patch verified Public Exploits:5EPSS %95
9.8
CVE-2022-27924 Actively exploitedVulnerability in N/a
Workaround Public Exploits:1EPSS %94
9.8
CVE-2022-37042 Actively exploitedVulnerability in N/a
Patch verified Public Exploits:4EPSS %92
7.2
CVE-2022-27925 Actively exploitedPath traversal in N/a
Workaround Public Exploits:1EPSS %99
8.9
CVE-2026-73570 Actively exploitedOS command injection in Zimbra Collaboration
Patch status unknown Public Exploits:1EPSS %72
6.1
CVE-2022-24682 Actively exploitedVulnerability in N/a
Workaround Public Exploits:1EPSS %31
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-66376"