CVE Tools
Track your stack

Hackers Target Zimbra Servers in Active Exploitation Campaign

SecurityWeekBy Eduard Kovacs

Reported exploitedZimbra Collaboration Suite

Our summary

CERT Polska has confirmed that attackers are actively exploiting a high-severity vulnerability in Zimbra Collaboration Suite, identified as CVE-2026-73570. The flaw allows unauthenticated attackers to execute arbitrary OS commands when the optional zimbra-snmp package is installed and SNMP notifications are enabled. This critical risk was addressed in version 10.1.20, released on July 20, so administrators should apply the patch immediately to prevent full server compromise, credential harvesting, and lateral movement.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. Help Net SecurityWeek in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploitedCVE-2026-73570
  2. BleepingComputerHackers breached over 270 Zimbra servers in ongoing attacksCVE-2026-73570
  3. Help Net SecurityUnpatched Zimbra servers are falling to CVE-2026-73570 attacksCVE-2026-73570
  4. Dark ReadingExploited Zimbra Flaw Highlights Shrinking Window to PatchCVE-2026-73570
  5. The Hacker News⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreCVE-2026-73570
  6. BleepingComputerCISA orders urgent patching of actively exploited Zimbra flawCVE-2026-73570
  7. The Hacker NewsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionCVE-2026-73570
  8. BleepingComputerCritical Zimbra RCE flaw now actively exploited in attacksCVE-2026-73570

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store