CVE Tools
Track your stack

Hackers breached over 270 Zimbra servers in ongoing attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedZimbra Collaboration Suite

Our summary

Over 270 internet-facing instances of Zimbra Collaboration Suite have been compromised through active exploitation of CVE-2026-73570, a high-severity remote code execution vulnerability. Synacor addressed this flaw, which involves command injection in the SNMP component when notifications are enabled, by releasing version 10.1.20. The vulnerability has been added to CISA's Known Exploited Vulnerabilities catalog following reports from CERT Polska and Shadowserver, prompting urgent patching directives for federal agencies.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. Help Net SecurityWeek in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploitedCVE-2026-73570
  2. Help Net SecurityUnpatched Zimbra servers are falling to CVE-2026-73570 attacksCVE-2026-73570
  3. Dark ReadingExploited Zimbra Flaw Highlights Shrinking Window to PatchCVE-2026-73570
  4. The Hacker News⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreCVE-2026-73570
  5. BleepingComputerCISA orders urgent patching of actively exploited Zimbra flawCVE-2026-73570
  6. SecurityWeekHackers Target Zimbra Servers in Active Exploitation CampaignCVE-2026-73570
  7. The Hacker NewsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionCVE-2026-73570
  8. BleepingComputerCritical Zimbra RCE flaw now actively exploited in attacksCVE-2026-73570

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store