CVE-2025-66376

LLM-synthesized narrative grounded in this CVE's description and references.

• Zimbra/Zm BuildOSV

  Range: 10.0.0-GA, 10.0.1, 10.0.13, …
• VMware/Zimbra Collaboration Suite

  cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*

  Range: >=10.0.0,<10.0.18
• Zimbra/Zimbra Collaboration (ZCS)llm-fuzzy

  Range: <10.0.18, <10.1.13

• wiki.zimbra.com/wiki/Security_CenternvdRelease NotesVendor Advisory
• wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesnvdVendor Advisory
• wiki.zimbra.com/wiki/Zimbra_Releases/10.0.18nvdRelease Notes
• wiki.zimbra.com/wiki/Zimbra_Releases/10.1.13nvdRelease Notes
• wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_PolicynvdProduct
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
  The Hacker News · Jul 30, 2026
• Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
  BleepingComputer · Jul 29, 2026
• 27th July – Threat Intelligence Report
  Check Point Research · Jul 27, 2026
• ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
  The Hacker News · Jul 27, 2026
• Russian Espionage Hackers Hit Zimbra With Half-Click Attacks
  GovInfoSecurity · Jul 24, 2026
• In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
  SecurityWeek · Jul 24, 2026
• Russian hackers exploit unpatched Zimbra servers to steal emails
  Help Net Security · Jul 24, 2026
• Russian Hackers Exploiting Zimbra Zero-Day to Steal 90 Days of Emails
  Cyber Security News · Jul 24, 2026
• Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
  The Hacker News · Jul 24, 2026
• Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
  Dark Reading · Jul 23, 2026
• Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
  The Hacker News · Jul 23, 2026
• Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
  CyberScoop · Jul 23, 2026
• International alert spotlights Russia-linked attacks on Zimbra webmail
  The Record · Jul 23, 2026
• Russian hackers exploit Zimbra zero-click flaw for email theft
  BleepingComputer · Jul 23, 2026
• Year-long Russian attacks infect users as soon as they look at an email
  The Register Security · Jul 23, 2026
• Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations
  Infosecurity Magazine · Jul 23, 2026
• Russian Global Webmail Espionage
  Unit 42 · Jul 23, 2026
• Zimbra urges customers to patch critical web client XSS flaw
  BleepingComputer · Jul 10, 2026
• 23rd March – Threat Intelligence Report
  Check Point Research · Mar 23, 2026
• Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
  CISA Alerts