ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

InfoQ ·
Programming

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks. By Olimpiu…

Read original article on InfoQ →

Related news