CVE-2026-73570

Stories

1. 

   Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

   Attackers are exploiting a patched command-injection flaw in Zimbra Collaboration Suite to install web shells and access mailbox data. Microsoft identifies CVE-2026-73570 as an unauthenticated operating-system command injection vulnerability with a CVSS score of 8.9 that can enable remote code execution through SNMP.

   The Hacker NewsSep 30

2. 

   Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

   Microsoft Threat Intelligence examines exploitation of CVE-2026-73570 in Zimbra mail servers, detailing observed attack paths, detection opportunities and mitigation guidance. The activity targets internet-facing servers through unauthenticated command injection.

   Microsoft Security BlogSep 30

Topics

• Security

Publishers

• Microsoft Security Blog
• The Hacker News