CVE-2025-54391

Risk Scores

Exploit Intelligence

• CIRCL seen: CVE-2025-54391 (circl-sighting)
• https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories (circl)
• https://wiki.zimbra.com/wiki/Security_Center (circl)
• https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy (circl)

Timeline

• Jul 21, 2025 CVE Published
• Jul 23, 2025 CVE Updated
• Sep 17, 2025 EPSS Score
• Sep 17, 2025 PoC Published
• Sep 24, 2025 EPSS Score
• Oct 1, 2025 EPSS Score
• Oct 4, 2025 Coalition ESS Score
• Oct 6, 2025 Coalition ESS Score
• Oct 8, 2025 EPSS Score
• Oct 13, 2025 Coalition ESS Score
• Oct 15, 2025 EPSS Score
• Oct 19, 2025 Coalition ESS Score

References

• https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0609/ advisory
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.16 advisory
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.10 advisory