Microsoft catches hackers exploiting Zimbra bug before disclosure
Attackers exploited Zimbra CVE-2026-73570 before disclosure to plant shells, steal mail, and move laterally.
5
Stories per day · 30 days
3 RSS
10 stories, newest first · one card per story
Stories tagged #cve-2026-73570
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure
Attackers exploited Zimbra CVE-2026-73570 for unauthenticated RCE after patching but before public disclosure.
3
Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access
Attackers are exploiting Zimbra CVE-2026-73570 for unauthenticated command execution and credential theft on exposed mail servers.
4
Zimbra Vulnerability Exploited to Gain Root Access and Steal Mailbox Authentication Secrets
Microsoft details active exploitation of Zimbra CVE-2026-73570 unauthenticated command injection granting root access, web shells, and theft of mailbox authentication secrets.
10
Attackers have been exploiting critical Zimbra flaw to steal emails
Attackers are exploiting critical Zimbra flaw CVE-2026-73570 to steal organizational email and credentials.
3
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Attackers exploit patched Zimbra CVE-2026-73570 to plant web shells and steal mailbox and authentication secrets.
4
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Microsoft tracks in-the-wild exploitation of unauthenticated Zimbra command injection CVE-2026-73570 on internet-facing mail servers.
10
CISA Warns of Zimbra OS Command Injection Vulnerability Active Exploitation (CVE-2026-73570)
CISA added actively exploited Zimbra OS command injection flaw CVE-2026-73570 to its KEV catalog, urging users to patch by August 24, 2026.
1
Unpatched Zimbra servers are falling to CVE-2026-73570 attacks
Attackers are exploiting unpatched Zimbra servers via CVE-2026-73570; 274 instances compromised, and CISA added the flaw to its KEV catalog.
2
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
CISA gave US agencies three days to patch actively exploited Zimbra flaw CVE-2026-73570, which allows full takeover of user communications.
2