CVE-2026-73570 Zimbra Collaboration
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification…
- CVSS
- 8.9 High
- EPSS
- 77%
- Percentile
- 100
- Published
- 2026-08-13
- Force
- 10 of 12
- Public PoC
- 9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
On CISA’s exploited list
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- Added
- 2026-08-21
- Federal patch deadline
- 2026-08-24
- Ransomware use
- not known