#zimbra
-
Attackers Weaponize Zimbra Flaw to Plant Web Shells and Steal Auth Secrets
Microsoft reports that attackers exploited an already-patched Zimbra Collaboration Suite flaw to deploy web shells, read mailboxes, and harvest server-wide authentication secrets.
-
Attack on Zimbra: Over 270 Servers Breached Through an SNMP Vulnerability
Attackers are actively exploiting the critical vulnerability CVE-2026-73570 in Zimbra Collaboration Suite, which allows remote code execution without authentication. According to Shadowserver, hundreds of servers have been compromised.
-
A Critical Zimbra Vulnerability Is Already Being Exploited in Attacks
Poland's CERT has warned of active exploitation of the critical vulnerability CVE-2026-73570 in the Zimbra Collaboration Suite mail server, which allows arbitrary code execution without authentication.
-
Russian Group Spent Six Months Reading Western Email via a 0-day in Zimbra
Opening the message was enough: the attack stole 90 days of correspondence, the password from the browser and two-factor authentication codes. The NSA, CISA and partners issued a joint advisory.
-
Critical Zimbra Vulnerability Allows Code Execution Through Emails
Zimbra is urging customers to install updates that fix a critical vulnerability in the Classic Web Client, which allows arbitrary code execution through specially crafted emails.