CVE-2022-27924: Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: yes — in CISA KEV since 2022-08-04
EPSS: 93.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-04-21 · updated 2026-10-02
Weakness: CWE-74

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

Summary

CVE-2022-27924 is a command injection flaw in Synacor Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0. An unauthenticated attacker can inject arbitrary memcache commands into a targeted instance, leading to unescaped commands that overwrite arbitrary cached entries. This vulnerability is actively exploited (listed in CISA KEV, SSVC active, EPSS 93.9%) and a public exploit exists. Apply the updates per vendor instructions immediately to mitigate.

CVE-2022-27924 هو ثغرة حقن أوامر في Synacor Zimbra Collaboration Suite (ZCS) الإصدارين 8.8.15 و9.0. يسمح المهاجم غير المصادق عليه بحقن أوامر memcache عشوائية في النسخة المستهدفة، مما يؤدي إلى أوامر غير مهرّبة تسبب الكتابة فوق إدخالات مخزنة مؤقتًا عشوائية. الثغرة مستغلة فعليًا (مدرجة في CISA KEV، SSVC نشط، EPSS 93.9%) ويوجد استغلال عام. طبّق التحديثات وفقًا لتعليمات البائع فورًا للتخفيف.

Affected products

Zimbra Collaboration: 8.8.15, 8.8.15-p1, 8.8.15-p10, 8.8.15-p11, 8.8.15-p12, 8.8.15-p13 (+50)

References

Get alerted when CVE-2022-27924 or the next vulnerability affects your stack