Exploitation24 Sept 2026·4 sources
274 Zimbra Servers Compromised in the Wild via CVE-2026-73570
Shadowserver found at least 274 internet-facing Zimbra Collaboration Suite servers compromised via CVE-2026-73570, an unauthenticated OS command injection that affects servers with the optional zimbra-snmp package installed and SNMP notifications enabled, and lets attackers run commands as the zimbra user via crafted SMTP requests.
ZimbraCVE-2026-73570RCE+2
