Signalis
sign in--:--:--UTC
CVEs

CVE-2025-66376

exploited in the wild☆ pin
CVSS
7.2
Reports
16
First seen
Jul 10, 2026
Last seen
Aug 20, 2026
Affected product

Zimbra Collaboration Suite

Associated actors

Void Blizzard ×11CL-STA-1114 ×2TA488 ×2APT28 ×2Cloud Atlas ×1Dysphoria ×1Everest ×1Fancy Bear ×1Iran-linked actors ×1JadeProx ×1JADEPUFFER ×1North Korean threat actors ×1RansomHouse ×1Russian cyberespionage campaign ×1TA458 ×1Trim ×1UAC-0099 ×1UAT-7810 ×1UNK_MassTraction ×1Winter Vivern ×1

Recent reports

High

Zimbra SNMP Command Injection Flaw Under Active Exploitation

The Hacker NewsCritical

Russian State-Sponsored Group Laundry Bear Exploits Zimbra Flaw to Steal Emails Without User Interaction

Proofpoint Threat InsightCritical

July 2026 CVE Landscape: 85 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktCritical

Russian Hackers Exploit Microsoft OWA Flaw to Maintain Persistent Mailbox Access

The Hacker NewsCritical

Russian Laundry Bear exploits Exchange OWA zero-day for persistent mailbox access

Bleeping ComputerHigh

Check Point Threat Intelligence Report – 27 July 2026

Check Point ResearchCritical

Weekly Threat Recap: AI Breach at Hugging Face, Check Point Exploit, Ransomware Campaigns, and Emerging Attack Vectors

The Hacker NewsHigh

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

The Hacker NewsCritical

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

The Hacker NewsHigh

Russian espionage group exploiting Zimbra zero-day to steal sensitive data from Western governments and organizations

CyberScoopCritical

Russia-linked Laundry Bear targets Zimbra webmail across NATO and Ukraine

The Record (Recorded Future News)Critical

Russian Laundry Bear exploits Zimbra zero-click XSS flaw to steal emails and credentials

Bleeping ComputerCritical

Russian APT Laundry Bear Exploits Zimbra Zero-Day for Espionage Against Western Governments

Proofpoint Threat InsightCritical

Russian Cyberespionage Campaign Targets Zimbra Webmail via Zero-Click Exploit

Palo Alto Unit 42Critical

Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Zimbra Collaboration Suite

CISA AdvisoriesHigh

Zimbra urges customers to patch critical web client XSS flaw

Bleeping Computer

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans