Section
Research
Threat intelligence and technical research from vendor labs, coordination centers and independent researchers.
2 matching records.
-
How CVE-2026-73570 turns a Zimbra log file into remote code execution
We reproduced the Zimbra command injection vulnerability and found that several public PoCs write a payload Swatchdog never matches, so a failed test looks like a patched server.
-
From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)
An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the…
Reuse this view
Same filters as JSON: /api/items?category=research&window=30d&vendor=Zimbra&limit=100. RSS for this section: feed.xml.