Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

vulnerability

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

The attack involved reconnaissance, lateral movement, and the use of various persistence mechanisms to maintain access. Microsoft observed activity across multiple regions and industries, with Polish CERT and CISA issuin…

The Hacker News · Sep 30, 2026 HighCVSS 8.9KEVEPSS 12%

CVE-2026-73570 vulnerability web shell lateral movement

vulnerability

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

Hackers began exploiting a high-severity OS command injection vulnerability in Zimbra Collaboration Suite shortly after patches were released, before public disclosure. Users are advised to update to version 10.1.20 or l…

SecurityWeek · Oct 1, 2026 HighCVSS 8.9KEVEPSS 12%

CVE-2026-73570 PL command injection remote code execution webshell

vulnerability

Microsoft catches hackers exploiting Zimbra bug before disclosure

Microsoft discovered hackers actively exploiting a Zimbra vulnerability weeks before its public disclosure. Microsoft patched the vulnerability in version 10.1.20 on July 20, and recommends that users running older versi…

The Register · Oct 1, 2026 HighCVSS 8.9KEVEPSS 12%

CVE-2026-73570 vulnerability command injection snmp

news.mlab.sh

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets