// day
Mar 18, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Mar 18, 2026
Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
› Microsoft SharePoint
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-03-18.
CVE-2026-20963 - highclosedpatchedclosed Mar 18, 2026
Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
› Synacor Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML. Added to CISA KEV on 2026-03-18.
CVE-2025-66376
