Zimbra

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 22, 2026
Last mentionedOct 1, 2026

Timeline

3 articles · newest first

Zimbra Vulnerability Exploited to Gain Root Access and Steal Mailbox Authentication Secrets

Microsoft details active exploitation of Zimbra CVE-2026-73570 unauthenticated command injection granting root access, web shells, and theft of mailbox authentication secrets.

GBHackersOct 1, 05:41 UTC · Oct 1, 2026Exploit / PoCExploitedCVE-2026-7357010 · 4 reads

When Business Email Compromise Starts Rewriting Reality

Rapid7 and Zimbra research details 50+ Zimbra flaws enabling BEC attacks that impersonate senders, rewrite documents, and manipulate calendars.

Rapid7 BlogSep 24, 13:00 UTC · Sep 24, 2026ResearchExploitedCVE-2024-45519 CVE-2025-27915 CVE-2026-73570+32 · 1 read

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited Zimbra flaw CVE-2026-73570 (unauthenticated OS command injection RCE) to its KEV catalog, setting an August 24, 2026 federal patch deadline.

Security AffairsAug 22, 07:18 UTC · Aug 22, 2026Exploit / PoCExploitedCVE-2026-735701 · 1 read

Related CVEs

by mentions

CVE-2026-7357077%8.9
Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
published Aug 13, 2026Synacor Zimbra Collaboration Suite (ZCS)KEVPoC ×5
CVE-2022-3704292%9.8
Unauthenticated ZIP Path Traversal RCE in Synacor Zimbra Collaboration Suite
published Aug 12, 2022Synacor Zimbra Collaboration Suite (ZCS) - mboximport functionalityKEVRansomwarePoC
CVE-2024-45519100%9.8
Unauthenticated Command Execution in Synacor Zimbra Collaboration Suite (ZCS)
published Oct 2, 2024Synacor Zimbra Collaboration Suite (ZCS)KEVPoC
CVE-2022-2792599%7.2
Authenticated Path Traversal File Upload Leading to RCE in Zimbra Collaboration Suite
published Apr 21, 2022Synacor Zimbra Collaboration Suite (ZCS)KEVRansomwarePoC
CVE-2023-3758049%6.1
Stored Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (ZCS)
published Jul 31, 2023Synacor Zimbra Collaboration Suite (ZCS)KEV
CVE-2025-279154%5.4
Stored XSS in Zimbra Collaboration Suite Classic Web Client via Malicious ICS Files
published Mar 12, 2025Synacor Zimbra Collaboration Suite (ZCS)KEVPoC

Appears with

CISAorganization · 3
Shadowserverorganization · 1
Zimbravendor · 1
Microsoftorganization · 1
CERT Polskaorganization · 1
Proofpointorganization · 1
CISAvendor · 1
CERT Polskavendor · 1
Rapid7organization · 1
Google Threat Analysis Grouporganization · 1
Zimbra Collaboration Suiteproduct · 1

Entities are extracted by the model from each article. First seen Aug 22, 2026, last mentioned Oct 1, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.