CERT24Zimbra CVE-2026-73570 exploited to install web shells and steal secrets — September 30, 2026Loading data…
CERT24Threat Observatory
Period

Zimbra CVE-2026-73570 exploited to install web shells and steal secrets — September 30, 2026

Microsoft Threat Intelligence identified active exploitation of CVE-2026-73570 against internet-facing Zimbra Collaboration Suite servers. The vulnerability enables unauthenticated operating-system command execution in the Zimbra SNMP notification path when the optional zimbra-snmp package is installed and SNMP notifications are enabled.

← Back to intelligence

Zimbra CVE-2026-73570 exploited to install web shells and steal secrets — September 30, 2026

Microsoft Threat Intelligence identified active exploitation of CVE-2026-73570 against internet-facing Zimbra Collaboration Suite servers. The vulnerability enables unauthenticated operating-system command execution in the Zimbra SNMP notification path when the optional zimbra-snmp package is installed and SNMP notifications are enabled.