Firetruck

CVE-2025-68645

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected