Unauthenticated command injection in the SNMP notification path lets hackers steal session tokens and install persistent webshells on mail servers. #Zimbra #CollaborationSuite