Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

HIGH 7.5EXPLOITED (CISA KEV)CVE-2022-27924 · Published 21/04/2022 · updated 02/10/2026

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 04/08/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

Package	Affected versions	Patched versions
zimbra collaboration suite synacor	`= 8.8.15= 9.0.0`	No fix yet

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

References

wiki.zimbra.com/wiki/Security_Center · Vendor Advisory
wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 · Release Notes
wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2022-27924

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free