Lucene search
+L

7200 matches found

NVD
NVD
•added 2026/08/13 4:19 p.m.•46 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS0.11736EPSS
SaveExploits9References4
CVE
CVE
•added 2026/08/13 3:19 p.m.•438 views

CVE-2026-73570

CVE-2026-73570 is a remote code execution vulnerability in Zimbra Collaboration (ZCS) before 10.1.20 , triggered when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthent...

8.9CVSS8.4AI score0.11736EPSS
SaveIn wildExploits9References4Affected Software1
attackerkb
attackerkb
•added 2026/08/13 3:19 p.m.•44 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS8.4AI score0.11736EPSS
SaveExploits9References3
Vulnrichment
Vulnrichment
•added 2026/08/13 3:19 p.m.•46 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS8.4AI score0.11736EPSS
SaveExploits9References2
EUVD
EUVD
•added 2026/08/13 3:19 p.m.•14 views

EUVD-2026-58069

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS8.4AI score0.11736EPSS
SaveExploits9References2
Cvelist
Cvelist
•added 2026/08/13 3:19 p.m.•141 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS0.11736EPSS
SaveExploits9References2
OSV
OSV
•added 2026/08/13 3:19 p.m.•117 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS6.8AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•19 views

PT-2026-71676

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions prior to 10.1.20 Description An OS command injection flaw exists in the SNMP monitoring functionality of the Zimbra Collaboration Suite. The issue occurs when the optional zimbra-snmp package is installed,...

8.9CVSS8AI score0.11736EPSS
SaveExploits9References81
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•5 views

CVE-2026-73570: Improper Neutralization of Special Elements used in an OS Command

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS8.4AI score0.11736EPSS
SaveExploits9References5
GithubExploit
GithubExploit
•added 2026/08/12 11:35 a.m.•29 views

Exploit for CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Executio...

6.6AI score0.01317EPSS
SaveExploits2
NVD
NVD
•added 2026/08/11 9:17 p.m.•13 views

CVE-2026-66150

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

7.8CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 8:19 p.m.•12 views

CVE-2026-66150

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

7.7AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 8:19 p.m.•16 views

EUVD-2026-56947

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/11 8:19 p.m.•16 views

CVE-2026-66150

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/11 8:19 p.m.•38 views

CVE-2026-66150

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 8:19 p.m.•88 views

CVE-2026-66150

The SonicWall Email Security appliance (specifically models ES Appliance 5000, 5050, 7000, 7050, 9000, VMWare, and Hyper-V ) is vulnerable to a Code Injection vulnerability (CVE-2026-66150 ). The flaw exists in the handling of the snmp command due to a lack of proper validation of user-supplied s...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References1
SonicWall
SonicWall
•added 2026/08/11 1:23 p.m.•35 views

SonicWall Email Security Affected By Multiple Vulnerabilities

1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...

7.8CVSS5.7AI score0.00256EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2026/08/11 12:00 a.m.•10 views

SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall Email Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•12 views

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•1 views

CVE-2026-66150: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2
Rows per page
Query Builder