PULSEUnderground Intel

LIVE18signals / 24h

FEED

ransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technology

CVE Watch—

CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

CVSS

—

No CVSS

EPSS

100.0%

p100

KEV

YES

Jan 10, 2022

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

100.0%EPSS · 30 days100.0%

2026-09-162026-10-14

KEV catalog record

Product

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Added to KEV

Jan 10, 2022

Remediate by

Jul 10, 2022

Known ransomware use

No

Summary description

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-9670

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-735708.9 HIG

KEV—80Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability52d CVE-2025-663767.2 HIG

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability8d CVE-2022-413529.8 CRI

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability35d CVE-2022-370429.8 CRI

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability72d CVE-2022-279257.2 HIG

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability14d CVE-2022-279247.5 HIG

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability13d