# CVE-2022-27924

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

- Page: https://www.vulneraibility.com/cve/CVE-2022-27924
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2022-08-04; CISA due date 2022-08-25; known ransomware use
- EPSS: 93.91% (percentile 99.8)
- Detection templates only, no public exploit found: 1 Nuclei template
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2026-08-04)
- Weakness: CWE-74
- Published: 2022-04-21

## Affected

- synacor:zimbra_collaboration_suite

## References

- [other] https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- [other] https://wiki.zimbra.com/wiki/Security_Center
- [other] https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27924

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.