Product
Zimbra Collaboration Suite
- First Reported
- Jul 15, 2026
- Latest Reported
- Sep 30, 2026
Reported Context (4)
- Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path. Attackers Exploit Zimbra CVE-2026-73570 to Compromise Internet-Facing Mail Servers
- upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the traditional BEC model in unexpected ways. We uncovered over 50 Zimbra Vulnerabilities Could Let Attackers Manipulate Email, Documents and Calendars
- Synacor Zimbra Collaboration Suite (ZCS) Recorded Future Identifies 73 High-Impact Vulnerabilities in August, 70 Actively Exploited
- Since at least July 2025, TA488 (previously UNK_PitStop) has used an exploit in Zimbra Collaboration Suite mailservers to target Ukrainian entities (as noted by Seqrite), as well as nuclear installations and the defense TA488 Used Zimbra XSS Flaw to Steal Emails and Maintain Access
CVE (77)
Malware (24)
People (1)
Threat Actors (4)
MITRE ATT&CK (23)
Vendors (23)
Products (25)
Tools (8)
Industries (7)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.