CVE-2020-7796: listed in the CISA KEV catalog
CVE-2020-7796 · CVSS 9.8 CRITICAL · EPSS 84% · KEV 2026-02-17
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
Is CVE-2020-7796 exploited?
- Listed in the CISA KEV catalog on 2026-02-17.
- Federal remediation due 2026-03-10.
- Past that date by 158 days.
- EPSS puts exploitation in the next 30 days at 84%.
- Public exploit code: none found in monitored sources.
- Public detection rules exist.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2020-7796
PlainSec has not published a story about this CVE.
Primary sources
What this record does not say
- No affected package data.
- No patch identifier.
KEV and EPSS are re-checked daily. Record last updated 2026-08-11.