CVE-2026-73570

CVE-2026-73570 — Zimbra zimbra-snmp 未认证操作系统命令注入 PoC 针对 CVE-2026-73570 的概念验证漏洞利用程序，这是一个存在于 Zimbra Collaboration Suite 免责声明： 本 PoC 仅用于授权的安全测试 、防御性研究以及对自己系统的验证。请勿将其用于任何您不拥有或未获得明确书面测试许可的系统。 漏洞机制 Zimbra 的 SNMP 通知功能使用 swatchdog 监控 /var/log/zimbra.log 中的服务事件。当日志行匹配其监视模式时，匹配到的文本会被插入到发送 SNMP 通知的 shell...

About Remote Code Execution - Zimbra Collaboration (CVE-2026-73570) vulnerability

About Remote Code Execution - Zimbra Collaboration CVE-2026-73570 vulnerability. Zimbra Collaboration is a collaboration software suite that includes a mail server and web client. In terms of functionality, it is comparable to Microsoft Exchange. The vulnerability allows an unauthenticated attack...

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

A now-patched security flaw impacting Zimbra Collaboration ZCS has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team CERT Polska. The vulnerability in question is CVE-2026-73570 CVSS score: 8.9, which refers to a case of command injection that ca...

VulnCheck KEV: CVE-2026-73570

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...