HIGHVulnerability
Verified
Global

CISA KEV: Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.

Analysis

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. Added to CISA Known Exploited Vulnerabilities catalog on 2026-04-20. Remediation due: 2026-04-23.

Indicators of Compromise (1)

CVE (1)
CVE-2025-48700
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Apr 20, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

NMI acquires Dwolla

Embedded payments firm NMI has acquired API-first account-to-account transaction vendor Dwolla.

Finextra
MEDIUMVulnerabilityNEW

Unpatched ChromaDB Vulnerability Can Lead to Server Takeover

The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive information. The post Unpatched ChromaDB Vulnerability Can Lead to Server Takeover appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

CaixaBank launches a carbon credit trading platform to help clients offset their emissions

CaixaBank CIB has launched a carbon credit trading platform, a tool designed to make it easier for corporate clients and businesses to voluntarily offset CO2 emissions.

Finextra