CVE Watch—

CVE-2022-41352

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

CVSS

—

No CVSS

EPSS

95.5%

p100

KEV

YES

Oct 20, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

95.5%EPSS · 30 days95.5%

2026-08-022026-08-30

KEV catalog record

Product

Synacor / Zimbra Collaboration Suite (ZCS)

Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Added to KEV

Oct 20, 2022

Remediate by

Nov 10, 2022

Known ransomware use

Summary description

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Required action

Apply updates per vendor instructions.

Notes

https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-41352

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-735708.9 HIG

97.3%

KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7d CVE-2022-370429.8 CRI

99.8%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27d CVE-2022-279257.2 HIG

99.9%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability27d CVE-2022-279247.5 HIG

99.7%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability27d CVE-2018-68826.1 MED

97.8%

KEV—79Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability18d CVE-2024-45519—

100.0%

KEV—80Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability—