Detections
Analytics

CVE-2026-73570

high

Description

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

References

https://moje.cert.pl/komunikaty/2026/145/aktywnie-wykorzystywana-podatnosc-w-zimbra-collaboration-suite/

https://www.theregister.com/security/2026/10/01/microsoft-catches-hackers-exploiting-zimbra-bug-before-disclosure/5300543

https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/

https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html

https://arstechnica.com/security/2026/09/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails/

https://www.helpnetsecurity.com/2026/08/25/zimbra-cve-2026-73570-compromised/

https://www.databreachtoday.com/zimbra-exploitation-spreads-as-thousands-stay-unpatched-a-32654

https://www.bleepingcomputer.com/news/security/hackers-breached-over-270-zimbra-servers-in-ongoing-attacks/

https://www.darkreading.com/vulnerabilities-threats/zimbra-flaw-exploitation-shrinking-window-patch

https://www.bleepingcomputer.com/news/security/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw/

https://securityaffairs.com/197693/security/u-s-cisa-adds-zimbra-collaboration-suite-zcs-flaw-to-its-known-exploited-vulnerabilities-catalog.html

https://www.cisa.gov/news-events/alerts/2026/08/21/cisa-adds-one-known-exploited-vulnerability-catalog

https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html

https://www.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/

https://www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-now-actively-exploited-in-attacks/

https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html

https://github.com/0xBlackash/CVE-2026-73570

https://github.com/dahnutz/zimbra-cve-2026-73570-ir

https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-73570

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

https://wiki.zimbra.com/wiki/Security_Center

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-58069

Details

Source: Mitre, NVD

Published: 2026-08-13

Updated: 2026-08-24

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.3

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:P

Severity: High

CVSS v3

Base Score: 8.9

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Severity: High

EPSS

EPSS: 0.71663

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest