CVE-2026-73576

mediumpriority · track · 26EPSS 0.003 · 26 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.33% (26th) EPSS

CVSS 6.5 · medium

Is it mine?

4 products

Check your exposure

Who says so?

3 sources

enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-26

In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An attacker who obtains a JWT signed with the generated secret may be able to recover the JWT signing secret through offline brute-force, potentially enabling JWT forgery.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:Nsecondary · ENISA EU

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:Nsecondary · cve@mitre.org USexploitability 1.8 · impact 4

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1241USprimary

affected products (4)

Products and version ranges known to be affected.

Synacor Zimbra <10.1.17all versionscert_bundDE
Synacor Zimbra< 10.1.17cert_bundDE
Zimbra Collaboration0 → 10.1.17enisa_euvdEU
synacor zimbra collaboration suite< 10.1.17nvdUScpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1735Synacor Zimbra: Mehrere SchwachstellenDeutsch2026-05-28csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd cert_bund nvd NVD CVE.org MITRE

published 2026-08-13modified 2026-08-28

related (15)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2023-4695US	high8.1	0.72% (54th)	—	2023-09-01
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2015-3405US	high7.5	5.29% (93rd)	—	2017-08-09
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the tem…
CVE-2016-10180US	high7.5OT elevated	4.54% (91st)	—	2017-01-30
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
CVE-2021-3689US	high7.5OT elevated	1.90% (80th)	—	2021-08-10
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2019-10638US	medium6.5	2.57% (85th)	—	2019-07-05
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such tr…

+10 more

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan