Remote Indirect Code Injection (XSS) Vulnerability in Synacor Zimbra Collaboration

72% confidence

Description

A vulnerability in Synacor Zimbra Collaboration allows an attacker to perform remote indirect code injection (Cross-Site Scripting - XSS).

Vendor	Product	Versions
synacor	zimbra collaboration	< 10.1.19

Tier B

CERT-FR16h ago

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

Patch available

10.1.19

CWECWE-79

PublishedJul 7, 2026

Last enriched2h ago