What’s Vulnerable › Vulnerabilities

CVE-2024-45519: Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2024-10-03
• EPSS: 99.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-10-02 · updated 2026-06-17
• Weakness: CWE-78

Description

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

Summary

CVE-2024-45519 is a critical command execution flaw in the postjournal service of Synacor Zimbra Collaboration Suite, allowing unauthenticated attackers to run commands on affected servers. It affects ZCS before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1. The vulnerability is actively exploited and listed in CISA's Known Exploited Vulnerabilities catalog, with a public exploit available and a 99.9% EPSS probability of exploitation in 30 days. Apply the vendor patches (8.8.15 Patch 46, 9.0.0 Patch 41, 10.0.9, 10.1.1) or follow vendor mitigations immediately.

CVE-2024-45519 ثغرة حرجة لتنفيذ الأوامر في خدمة postjournal ضمن Synacor Zimbra Collaboration Suite، وتتيح للمهاجمين غير المصادق عليهم تنفيذ أوامر على الخوادم المتأثرة. تؤثر الثغرة في ZCS قبل 8.8.15 Patch 46، و9 قبل 9.0.0 Patch 41، و10 قبل 10.0.9، و10.1 قبل 10.1.1. الثغرة مستغلة فعلياً ومدرجة في كتالوج CISA للثغرات المعروفة الاستغلال، مع وجود استغلال عام واحتمال استغلال بنسبة 99.9% خلال 30 يوماً وفق EPSS. يجب تطبيق تحديثات المورّد (8.8.15 Patch 46، و9.0.0 Patch 41، و10.0.9، و10.1.1) أو اتباع إجراءات التخفيف فوراً.

Affected products

• Zimbra Collaboration: before 8.8.15; from 10.0.0 before 10.0.9; 8.8.15, 8.8.15-p1, 8.8.15-p10, 8.8.15-p11, 8.8.15-p12, 8.8.15-p13 (+84) — fixed in 10.0.9, 8.8.15

How to fix

Upgrade to a fixed version: Zimbra Collaboration 10.0.9, 8.8.15. Check the vendor advisory for mitigations.

References

• https://wiki.zimbra.com/wiki/Security_Center
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes
• https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes
• https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
• https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
• https://blog.projectdiscovery.io/zimbra-remote-code-execution/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45519

Get alerted when CVE-2024-45519 or the next vulnerability affects your stack