CVE-2026-73570

notes

Microsoft catches hackers exploiting Zimbra bug before disclosure

1. Executive summary Attackers exploited CVE-2026-73570, an unauthenticated OS command injection flaw in Zimbra Collaboration Suite (ZCS), against internet-facing mail servers weeks before

01 Oct 2026 · 9 min read read →

notes

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

1. Executive summary CVE-2026-73570 is an unauthenticated OS command injection flaw in the Zimbra Collaboration Suite SNMP notification path, rated CVSS 8.9 HIGH

30 Sep 2026 · 13 min read read →

notes

CVE-2026-73570 — Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

1. Executive summary CVE-2026-73570 is a HIGH-severity OS command injection vulnerability (CVSS 8.9, CWE-78) in Synacor Zimbra Collaboration Suite (ZCS) versions

22 Aug 2026 · 6 min read read →