Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
3 / 3 results
highbug_reportVulnerabilityZimbra CVE-2026-73570 exploited to deploy web shells, steal credentials
Zimbra Collaboration Suite (ZCS) versions prior to 10.1.20. Exploitation requires SNMP notifications enabled and the optional zimbra-snmp package installed. Unauthenticated remote code execution via crafted SMTP requests.
highbug_reportVulnerabilityZimbra CVE-2026-73570: Unauthenticated RCE exploited in the wild
Zimbra Collaboration Suite versions prior to 10.1.20, when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Internet-facing mail servers are at risk. Exploitation requires no authentication or user interaction.
highbug_reportVulnerabilityZimbra SNMP flaw CVE-2026-73570 under active exploitation for RCE
Zimbra Collaboration Server (ZCS) versions before 10.1.20, only when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Unauthenticated remote attackers can exploit this command injection flaw.