zimbra patched this bug in july. hackers are breaking into inboxes with it right now

CERT Polska is warning that attackers are actively exploiting an unauthenticated command-injection bug in Zimbra's SNMP monitoring component — one… Aliteq Priya Nair · Software & Systems Editor

CVE-2026-73570 is a CVSS 8.9 unauthenticated command-injection bug in Zimbra Collaboration's SNMP notification handling.

Zimbra fixed it in version 10.1.20, released July 20, 2026 — five weeks before CERT Polska reported active exploitation.

The bug only affects servers with the optional zimbra-snmp package installed and SNMP notifications turned on, but that watchdog service runs by default.

CISA added CVE-2026-73570 to its Known Exploited Vulnerabilities catalog on August 21, 2026, giving federal agencies until August 24 to patch.

Once inside, attackers can establish persistence, harvest credentials, read email accounts, and move laterally — the group behind the campaign is still unidentified.

Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary…

Read the full story

Aliteq zimbra patched this bug in july. hackers are breaking into inboxes with it right now Read the full story on Aliteq