ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution - infoq.com
This story deserves to be shared
Send it to someone who'd care, or post it on your networks.
A critical remote command execution vulnerability affecting the Zimbra Collaboration Suite mail platform has come under active, widespread exploitation, allowing adversaries to harvest complete mailbox archives and persistent authentication credentials without prior system access.
The defect, tracked as CVE-2026-73570, carries a CVSS score of 8.9 and stems from improper input sanitisation inside the platform's SNMP notification subsystem. When paired with public-facing mail transfer agents, the pipeline permits unauthenticated remote attackers to inject arbitrary operating system commands that execute under the context of the underlying Zimbra operating system user account.
This article is an excerpt. To read the full content, visit the original source. infoq.com
Related articles
FDA approves Teva’s monthly injection of olanzapine for schizophrenia - Pharmaceutical Technology
Today’s NYT Strands Hints, Spangram and Answers for Sunday, Oct. 18, #959 - CNET
Here’s your NYT Strands hint for today, plus the spangram and all of today’s Strands answers for puzzle No. 959 on Sunday, Oct. 18, 2026. Today’s Strands theme was tricky. It helps to be a runner. Read on for all the answers.
0 comments
No comments yet. Be the first to share your thoughts!