Attackers have been exploiting critical Zimbra flaw to steal emails
Attackers are exploiting critical Zimbra flaw CVE-2026-73570 to steal organizational email and credentials.
85
Vendor
Synacor
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 21, 2026
- Last mentionedSep 30, 2026
Timeline
3 articles · newest firstUnpatched Zimbra servers are falling to CVE-2026-73570 attacks
Attackers are exploiting unpatched Zimbra servers via CVE-2026-73570; 274 instances compromised, and CISA added the flaw to its KEV catalog.
78
Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw
CERT Polska confirms active exploitation of critical unauthenticated RCE CVE-2026-73570 in Zimbra Collaboration Suite, patched July 20.
78
Related CVEs
by mentions- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
Appears with
- Zimbra Collaboration Suiteproduct · 3
- Shadowserver Foundationorganization · 2
- Zimbravendor · 2
- Seqrite Labsorganization · 1
- CISAorganization · 1
- Shadowserverorganization · 1
- Microsoftorganization · 1
- Winter Vivernthreat actor · 1
- Synacororganization · 1
- Polish CERTorganization · 1
- CERT Polskaorganization · 1
- APT28threat actor · 1
- APT29threat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.