Zimbra

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenAug 24, 2026
Last mentioned29d ago

Timeline

3 articles · newest first

Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access

Attackers are exploiting Zimbra CVE-2026-73570 for unauthenticated command execution and credential theft on exposed mail servers.

Cyber Security NewsOct 1, 11:40 UTC · 29d agoExploit / PoCExploitedCVE-2026-735704 · 1 read

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded FutureSep 8, 00:00 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+44 · 2 reads

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

CISA gave US agencies three days to patch actively exploited Zimbra flaw CVE-2026-73570, which allows full takeover of user communications.

Dark ReadingAug 24, 21:46 UTC · Aug 24, 2026Exploit / PoCExploitedCVE-2026-735702 · 1 read

Related CVEs

by mentions

CVE-2026-7357072%8.9
Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
published Aug 13, 2026Synacor Zimbra Collaboration Suite (ZCS)KEVPoC ×5
CVE-2026-7289899%10.0
Unauthenticated SQL Injection in Metabase Grants Admin Access
published Aug 10, 2026MetabaseKEVPoC ×3
CVE-2026-919829%9.8
Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
published Jul 17, 2026IBM Langflow OSSKEVPoC
CVE-2025-6259360%9.4
Actively Exploited Browser-Based RCE in Ray AI Compute Engine
published Nov 26, 2025Ray-Project (Anyscale) RayKEVPoC
CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-598002%9.2
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
published Jul 7, 2026
CVE-2026-33954%5.5
A flaw has been found in MaxSite CMS up to 109.1
published Mar 1, 2026max-3000 maxsite cms

Appears with

Zimbravendor · 3
CISAorganization · 2
CISAvendor · 2
Metabaseproduct · 1
Microsoft Windowsproduct · 1
PaperCut NG/MFproduct · 1
IBM Langflowproduct · 1
Insikt Grouporganization · 1
DeepSeekai model · 1
PentestGPTai model · 1
Rayproduct · 1
Hermes Agentai model · 1
Metabasevendor · 1
Red Hatvendor · 1
IBM Langflowvendor · 1
sudoproduct · 1

Entities are extracted by the model from each article. First seen Aug 24, 2026, last mentioned 29d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.