CISA has added CVE-2025-27915 — a stored cross-site scripting (XSS) bug in the Classic Web Client of Synacor’s Zimbra Collaboration Suite (ZCS) — to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation and urging immediate remediation by federal agencies and...
The Cybersecurity and Infrastructure Security Agency (CISA) has made an important update to its Known Exploited Vulnerabilities Catalog by adding two new vulnerabilities. This update is essential reading for IT administrators, security professionals, and even avid Windows users who want to keep...