CyberSecurity News

Hackers Target Zimbra Servers in Active Exploitation Campaign

SecurityWeek

· August 20, 2026

AI summary

Poland's CERT Polska has observed the exploitation of a Zimbra Collaboration vulnerability. The vulnerability being exploited is identified as CVE-2026-73570. Hackers are actively targeting Zimbra servers in an exploitation campaign.

Vulnerabilities mentioned

CVE-2026-73570

HIGH

CVSS 8.9

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Countries in focus

🇵🇱Poland136 RW · 24 crit

Read the full article at SecurityWeekwww.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.