Threat intelligence / Vulnerability
CVE-2025-68645
Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
Vulnerability
TypeVulnerability
External ID—
First seen2026-01-22
Last seen2026-01-22
Confidence
—
Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
Labels
CISA KEV context
Vendor / productSynacor Zimbra Collaboration Suite (ZCS)
Added2026-01-22
Due date2026-02-12
2 recorded
Relationships
2 external