HackerFeeds

CyberSecurity News

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

The Hacker News
· August 20, 2026
Vulnerabilities

AI summary

A security flaw in Zimbra Collaboration has been exploited by attackers, allowing for unauthenticated remote code execution. The vulnerability, identified as CVE-2026-73570 with a CVSS score of 8.9, is a command injection issue. It has been reported by the Polish Computer Emergency Response Team that this flaw is being actively exploited. The vulnerability has now been patched. The issue affects Zimbra Collaboration, enabling remote code execution.

Vulnerabilities mentioned

CVE-2026-73570
HIGH
CVSS 8.9

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Read the full article at The Hacker Newsthehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.