Search: “zimbra”

143 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 70 Vulnerability 61 Threat actor 33 Ransomware 30 Malware 22 Data breach 11 Phishing & fraud 3 Advisory 3 Policy & legal 1 Research 1 Industry 1 AI tools & infra 1

SeverityAll critical 143 high 66 medium 23 low 2 info 3

Unpatched Zimbra Collaboration Suite RCE CVE-2022

Security AffairsOct 16, 13:26 UTC · Oct 16, 2022Vulnerability in the wildCVE-2022-41352 CVE-2015-1197

60

Zimbra urges customers to manually fix actively exploited zero

Security AffairsJul 13, 20:12 UTC · Jul 13, 2023Exploit / PoC in the wildCVE-2022-41352 CVE-2022-279251

60

Threat actors hacked hundreds of servers by exploiting Zimbra CVE-2022

Security AffairsOct 16, 14:09 UTC · Oct 16, 2022Threat actor in the wildCVE-2022-41352 CVE-2015-1197

60

Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!

Security AffairsOct 2, 09:21 UTC · Oct 2, 2024Exploit / PoC in the wildCVE-2024-45519

60

Experts warn of mass exploitation of an RCE flaw in Zimbra Collaboration Suite

Security AffairsAug 12, 08:00 UTC · Aug 12, 2022Vulnerability in the wildCVE-2022-27925 CVE-2022-37042 CVE-2022-27924

60

Unpatched Zimbra RCE bug exploited by attackers (CVE-2022-41352)

Help Net SecurityOct 14, 14:18 UTC · Oct 14, 2022Vulnerability in the wildCVE-2022-41352 CVE-2022-30333 CVE-2015-11971

60

Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025

Security AffairsMar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-66376

60

U.S. CISA adds Synacor Zimbra Collaboration flaw to its Known Exploited Vulnerabilities catalog

Security AffairsOct 7, 05:24 UTC · Oct 7, 2024Exploit / PoC in the wildCVE-2024-45519

60

European governments targeted by Chinese hackers with a Zimbra webmail zero

The RecordJan 17, 00:00 UTC · Jan 17, 2023Exploit / PoC

60

Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

The Hacker NewsOct 10, 03:51 UTC · Oct 10, 2022Vulnerability in the wildCVE-2022-41352 CVE-2022-303331

60

Zimbra zero-day exploited to steal government emails by 4 groups

Security AffairsNov 16, 20:49 UTC · Nov 16, 2023Exploit / PoC CVE-2023-37580

60

CISA orders civilian agencies to patch Zimbra bug after mass exploitation

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2022-37042 CVE-2022-27925 CVE-2022-27924

60

Zimbra zero-day actively exploited by an alleged Chinese threat actor

Security AffairsFeb 4, 09:54 UTC · Feb 4, 2022Exploit / PoC in the wild

60

Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519)

Help Net SecurityOct 2, 00:00 UTC · Oct 2, 2024Vulnerability in the wildCVE-2024-45519

60

Zimbra fixed actively exploited zero-day CVE-2023

Security AffairsJul 27, 21:49 UTC · Jul 27, 2023Exploit / PoC in the wildCVE-2023-38750

60

CISA adds Zimbra bug to Known Exploited Vulnerabilities Catalog

Security AffairsAug 5, 13:03 UTC · Aug 5, 2022Exploit / PoC in the wildCVE-2022-27924

60

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

Security AffairsJul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-66376

60

Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

Security AffairsJul 10, 20:42 UTC · Jul 10, 2026Data breach in the wildCVE-2025-68645 CVE-2020-7796 CVE-2025-66376

60

U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

Security AffairsOct 7, 21:39 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2025-27915

60

Zimbra users targeted in zero

Security AffairsOct 7, 21:32 UTC · Oct 7, 2025Exploit / PoC CVE-2025-27915

60

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

The Hacker NewsNov 17, 03:48 UTC · Nov 17, 2023Exploit / PoC CVE-2023-37580

60

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

Help Net SecurityJul 17, 00:00 UTC · Jul 17, 2023Exploit / PoC in the wildCVE-2023-34192 CVE-2022-24682 CVE-2022-41352+1 CVEs1

60

Researchers Warn of Ongoing Mass Exploitation of Zimbra RCE Vulnerability

The Hacker NewsAug 12, 06:14 UTC · Aug 12, 2022Vulnerability in the wildCVE-2022-27925 CVE-2022-37042 CVE-2022-27924

60

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

The Hacker NewsJul 11, 06:45 UTC · Jul 11, 2026Exploit / PoC in the wildCVE-2025-27915 CVE-2023-37580 CVE-2024-27443

60

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

The Hacker NewsOct 10, 06:52 UTC · Oct 10, 2025Exploit / PoC in the wildCVE-2025-27915

60

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

The Hacker NewsOct 4, 06:25 UTC · Oct 4, 2024Exploit / PoC in the wildCVE-2024-45519

60

Hackers target Greece, Tunisia, Moldova, Vietnam and Pakistan with Zimbra zero

The RecordNov 16, 17:06 UTC · Nov 16, 2023Exploit / PoC CVE-2023-37580 CVE-2022-24682

60

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

The Hacker NewsOct 17, 09:50 UTC · Oct 17, 2022Vulnerability in the wildCVE-2022-41352 CVE-2015-11971

60

Zimbra RCE Vulnerability Exploited Without Admin Privileges

Infosecurity MagazineAug 11, 17:30 UTC · Aug 11, 2022Vulnerability in the wildCVE-2022-27925 CVE-2022-37042

60

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities

The Hacker NewsFeb 10, 09:09 UTC · Feb 10, 2025Vulnerability CVE-2025-25064 CVE-2025-25065

60

Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation

The Hacker NewsNov 16, 15:50 UTC · Nov 16, 2023Exploit / PoC in the wildCVE-2023-20214 CVE-2023-37580

60

New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022Vulnerability CVE-2022-27924

60

Hackers Exploited 0-Day Vulnerability in Zimbra Email Platform to Spy on Users

The Hacker NewsFeb 4, 13:18 UTC · Feb 4, 2022Vulnerability

55

Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug

Security AffairsJul 21, 18:25 UTC · Jul 21, 2026Vulnerability

55

Russian hackers exploit Zimbra flaw to breach Ukrainian maritime agency

The RecordMar 19, 12:41 UTC · Mar 19, 2026Vulnerability CVE-2025-66376

60

U.S. CISA adds Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 18, 10:55 UTC · Feb 18, 2026Ransomware in the wildCVE-2008-0015 CVE-2020-7796 CVE-2024-7694+1 CVEs

60

Attackers exploit critical Zimbra vulnerability using cc’d email addresses

Ars Technica · SecurityOct 2, 21:50 UTC · Oct 2, 2024Vulnerability in the wildCVE-2024-45519

60

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog

The Hacker NewsMar 1, 04:37 UTC · Mar 1, 2022Vulnerability in the wildCVE-2022-24682 CVE-2017-8570 CVE-2017-0222+1 CVEs

60

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

The Hacker NewsJul 21, 13:18 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-50055

60

CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Advisory in the wildCVE-2025-66376 CVE-2026-20963 CVE-2026-20131+5 CVEs

60