Live › vulnerability › CVE-2022-27924
Go to dashboardZimbra Collaboration Suite lets an attacker inject memcache commands into a running instance, overwriting arbitrary cached entries. CISA lists it as actively exploited, and ransomware use is tagged in the source data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Synacor Zimbra Collaboration Suite (ZCS) | vendor | – | – |
| synacor zimbra collaboration suite | vendor | = 8.8.15 | – |
| synacor zimbra collaboration suite | vendor | = 9.0.0 | – |
Unknown from the sources.
Apply the Zimbra updates per vendor instructions; the specific fixed version is not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
This page as .md · .json · in your agent: get_signal("CVE-2022-27924")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.