SecurityThe Registerabout 2 hours ago
Microsoft Tracks Zimbra Bug Exploitation Before Disclosure
6 min read
Microsoft Threat Intelligence says attackers exploited CVE-2026-73570, an unauthenticated command injection flaw in Zimbra Collaboration Suite, weeks before public disclosure. Zimbra patched version 10.1.20 on July 20, but the CVE was not published until August 13. Attackers deployed web shells, stole credentials and mailbox data, and gained root access on at least one server.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
