high Known exploited

CVE-2026-73570

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Published: Aug 21, 2026
Vendor: Synacor
Product: Zimbra Collaboration Suite (ZCS)
CISA due date: 2026-08-24
Source: merged

References

ADVISORY

Check your website: Korisec scans for exposed services, weak TLS, missing headers, and WordPress plugin risks. Run a free scan or start a trial.

← Back to CVE Tracker · Official record: cve.org