Unauthenticated

vulnerabilities 2026-08-21
CVE-2026-73570: Unauthenticated Zimbra RCE via SNMP Notifications Under Active Exploitation
CERT Polska confirms in-the-wild exploitation of CVE-2026-73570, an unauthenticated OS command injection in Zimbra Collaboration's SNMP notification handling — patched in 10.1.20, but plenty of mail servers haven't updated.
active-exploitation command-injection rce email-security unauthenticated

CVE-2026-73570: Unauthenticated Zimbra RCE via SNMP Notifications Under Active Exploitation