CVE Tools
Sign in
Back to feed
Exploited in the wild Zimbra Collaboration Suite rce Synacor zero-day

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

Dark Reading·By Jai Vijayan··4 min read
CVE Tools coverage

CISA has mandated that federal agencies patch a critical remote code execution vulnerability in Zimbra Collaboration Suite by August 24, following confirmed active exploitation in the wild. The flaw, identified as CVE-2026-73570, allows unauthenticated attackers to execute arbitrary commands on servers where SNMP notifications are enabled, a setting that is active by default in affected versions. Zimbra addressed the issue in version v10.1.20, urging organizations to update immediately while treating exposed instances as potential security incidents requiring log review and incident response procedures.

Open on Dark Reading

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure