CERT Polska

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 22, 2026
Last mentionedSep 7, 2026

Timeline

3 articles · newest first

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.

The Hacker NewsSep 7, 14:36 UTC · Sep 7, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-86206 CVE-2026-86207+76

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

CERT Polska and CISA report active exploitation of Zimbra RCE CVE-2026-73570, with 267 instances compromised per Shadowserver.

The Hacker NewsAug 26, 05:08 UTC · Aug 26, 2026Exploit / PoCExploitedCVE-2026-73570 CVE-2025-663765 · 1 read

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited Zimbra flaw CVE-2026-73570 (unauthenticated OS command injection RCE) to its KEV catalog, setting an August 24, 2026 federal patch deadline.

Security AffairsAug 22, 07:18 UTC · Aug 22, 2026Exploit / PoCExploitedCVE-2026-735701 · 1 read

Related CVEs

by mentions

CVE-2026-7357077%8.9
Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
published Aug 13, 2026Synacor Zimbra Collaboration Suite (ZCS)KEVPoC ×5
CVE-2026-8621815%10.0
Pre-Auth Static Code Injection RCE in N-able N-central (Exploited in the Wild)
published Sep 6, 2026N-able N-centralKEVPoC ×3
CVE-2026-860606%9.2
Argument-Injection Flaw in MikroTik RouterOS SSH Login Enables Privilege Escalation
published Sep 5, 2026MikroTik RouterOS v6 (Long-term channel)KEVPoC ×3
CVE-2026-672772%8.8
Unauthenticated Kernel Crash and Memory Leak in MikroTik RouterOS btest
published Sep 5, 2026MikroTik RouterOS (Long-term channel, v6)KEVPoC
CVE-2026-672792%6.9
Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS
published Sep 5, 2026MikroTik RouterOS (Long-term branch, v6)KEVPoC ×4
CVE-2025-6637620%6.1
Stored Cross-Site Scripting in Synacor Zimbra Collaboration Suite Classic UI
published Jan 5, 2026Synacor Zimbra Collaboration Suite (ZCS) 10KEV
CVE-2026-672769%9.2
SSH RSA Authorized-Key Bypass in MikroTik RouterOS 7.x
published Sep 5, 2026MikroTik RouterOSPoC
CVE-2026-67281<1%8.7
Unauthenticated Arbitrary File Read in MikroTik RouterOS WebFig (CVE-2026-67281)
published Sep 5, 2026MikroTik RouterOS (WebFig /jsproxy)PoC
CVE-2026-86206<1%6.9
Access Control Filter Bypass in N-able N-central Exposes Internal APIs
published Sep 5, 2026N-able N-central
CVE-2026-67278<1%6.3
X.509 Signature Forgery Enables TLS Impersonation in MikroTik RouterOS 7.x
published Sep 5, 2026MikroTik RouterOSPoC

Appears with

Zimbravendor · 2
CISAorganization · 2
CERT Polskaorganization · 2
CISAvendor · 2
Googleorganization · 1
Sansecvendor · 1
Adobevendor · 1
Elasticvendor · 1
Shadowserver Foundationvendor · 1
N-ableorganization · 1
Adobe Commerceproduct · 1
Zimbraorganization · 1
Chromeproduct · 1
Morphisecvendor · 1
ZimReapermalware · 1
Laundry Bearthreat actor · 1

Entities are extracted by the model from each article. First seen Aug 22, 2026, last mentioned Sep 7, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.