Mmastodon TechnologyCybersecurity first seen 6 h ago, last 6 h ago, peak #7
Critical Zimbra flaw CVE-2026-73570 actively exploited
Original: 🤖 CVE-2026-73570 (CVSS 8.9): unauthenticated OS command injection in Zimbra Collaboration Suite via its SNMP service, no
A critical vulnerability, CVE-2026-73570 with a CVSS score of 8.9, in Zimbra Collaboration Suite allowed unauthenticated attackers to run operating system commands through its SNMP service. According to Microsoft Security Research, attackers exploited the flaw to deploy web shells and steal mailbox credentials. A patch has been released, and security teams are urged to update affected servers promptly.
Why now: Actively exploited enterprise email software poses urgent risk of credential theft, driving urgent patching discussions.
Zimbra Collaboration SuiteMicrosoft Security ResearchCVE-2026-73570
Evidence
- 🤖 CVE-2026-73570 (CVSS 8.9): unauthenticated OS command injection in Zimbra Collaboration Suite via its SNMP service, now patched. Attackers exploited it to drop web shells and harvest mailbox credentials, per Microsoft Security Research. 🔗 https://… · cloud@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/563842