CVE-2025-27915

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 18, 2026

Last Seen

October 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine80.8

Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities. The flaw allows unauthenticated attackers to execute remote code and harvest sen...