ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution
IgnoreInfoQ · 2026-10-13 13:13 UTC
Not analyzed yet
Eligible for automatic cleanup in 3 day(s) unless marked Must Read.
Content
A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks. By Olimpiu Pop