Products

Zimbra Collaboration Suite

Follow the latest coverage, related explainers and connected technology stories.

Latest coverage

CN
Microsoft Detects Active Exploitation of an Undocumented Command Injection Vulnerability in Zimbra Servers

Microsoft Detects Active Exploitation of an Undocumented Command Injection Vulnerability in Zimbra Servers

Microsoft Threat Intelligence observed exploitation of CVE-2026-73570 in Internet-facing Zimbra servers, enabling unauthenticated remote command execution when specific components and settings were enabled. The attacks included planting backdoors, escalating privileges, moving between system nodes, and collecting email data and authentication material.

CN
CISA Gives U.S. Agencies Three Days to Patch an Exploited Zimbra Vulnerability

CISA Gives U.S. Agencies Three Days to Patch an Exploited Zimbra Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency ordered federal civilian agencies to secure Zimbra servers within three days against an actively exploited remote code execution vulnerability. Shadowserver data indicates that more than 270 compromised instances have been observed, while the number of Zimbra servers exposed to the internet exceeds 12,000.