Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially…
Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Zimbra
- Product
- Zimbra Collaboration
- CVSS
- 8.9
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
Why it ranks 67 (Critical)
- CISA KEV listed
- CVSS 8.9 high
- Exposed product class: email
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-73570 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.