---
id: 10118
title: "[CVE-2022-27924] Mass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925"
cve: CVE-2022-27924
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2022/08/10/mass-exploitation-of-unauthenticated-zimbra-rce-cve-2022-27925/"
published_at: "2022-08-10T15:22:11Z"
tags: ["rce", "vulnerability-research", "threat-intelligence", "exploit", "0day", "zimbra", "webshell", "cve-2022-27924", "volexity"]
phying_url: "https://phying.com/item/10118"
lang: en
---

# [CVE-2022-27924] Mass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925

## Summary

[Note: Volexity has reported all findings in this post to Zimbra. Where an existing contact was known, Volexity has notified local CERTs of compromised Zimbra instances in their constituency. The […]

## Intelligence Metadata

- **Sources:** volexity.com
- **CVE:** CVE-2022-27924
- **Published:** 2022-08-10T15:22:11Z
- **Original:** https://www.volexity.com/blog/2022/08/10/mass-exploitation-of-unauthenticated-zimbra-rce-cve-2022-27925/
- **Phying News:** https://phying.com/item/10118