Microsoft details active exploitation of Zimbra CVE-2026-73570 unauthenticated command injection granting root access, web shells, and theft of mailbox authentication secrets.
Ubuntu patched Exim flaws, including a Proxy Protocol out-of-bounds write that could allow remote code execution.
Canada's Cyber Centre warns Exim versions before 4.100.1 are vulnerable and urges administrators to update.
Exim Mail Server 4.100.1 patches critical out-of-bounds write and SMTP smuggling flaws that could allow remote code execution and message injection.
Exim released security update 4.100.1 addressing vulnerabilities in the widely used open-source mail transfer agent; details remain sparse.
Postfix 3.11.7 and legacy releases 3.10.14 and 3.9.15 fix SMTP smuggling, remote crash, and hardening issues.
SmarterMail 100.0.9693 executes its antivirus command-line configuration as NT AUTHORITY\SYSTEM, a CWE-250 flaw rated CVSS 7.2.