Zimbra Product Security Update Advisory (CVE-2025-66376)

overview

We have released security updates that address vulnerabilities in Zimbra products. users of affected products are encouraged to update to the latest version.

affected Products

CVE-2025-66376

Synacor Zimbra Collaboration Suite (ZCS) Versions: 10.0.18 and earlier
Synacor Zimbra Collaboration Suite (ZCS) Version: 10.1.13 and earlier

resolved Vulnerabilities

Cross-site scripting vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2025-66376)

vulnerability patches

Vulnerability patches have been made available in the latest update. please follow the instructions on the reference site to update to the latest version of the vulnerability patch.

CVE-2025-66376

Synacor Zimbra Collaboration Suite (ZCS) Version: 10.0.18
Synacor Zimbra Collaboration Suite (ZCS) Version: 10.1.13

references

[1] Zimbra Security Advisories
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories