CyberSecurity News

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

SecurityWeek

· October 1, 2026

AI summary

A Zimbra vulnerability, identified as CVE-2026-73570, is being exploited in the wild before its public disclosure. This vulnerability can be exploited through specially crafted emails under certain conditions, and it does not require user interaction to be successful.

Vulnerabilities mentioned

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Read the full article at SecurityWeekwww.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.