Groupware #Zimbra: Update schließt zahlreiche Sicherheitslücken | Security https://www.heise.de/news/Groupware-Zimbra-Update-schliesst-zahlreiche-Sicherheitsluecken-11468996.html #Patchday #XSS #CrossSiteScripting

Zimbra: trust score D, 8 CVEs on CISA KEV, 100% unpatched. Peak CVSS 10. XSS (CWE-79) dominates 47 CVEs. Email is the target; patch or migrate. https://www.valtersit.com/vendors/zimbra/ #cybersecurity #infosec #Zimbra

Setzt jemand #Zimbra ein? Sicherheitslücken patchen!
borncity.com/blog/2026/10...

Can you believe Russian state-backed hackers have been exploiting an unpatched Zimbra flaw for over a year, silently stealing government emails?

#Russian #Hackers #Exploit #Unpatched #Zimbra

@microsoft.com
Unauthenticated command injection enabled webshells, root access, persistence and mailbox theft; patch to 10.1.20+.
-
IOCs: 45[.]32[.]30[.]235, transzimbra[.]linkpc[.]net, psk1zim[.]abrdns[.]com
-
#CVE202673570 #ThreatIntel #Zimbra

Critical zero-days hit Cisco SD-WAN Manager, Citrix NetScaler gateways, and Zimbra mail servers as threat actors seize root access and deploy tunnels while China-nexus espionage cluster UAT-11587 breaches Asian agencies.

inferlume.com/reports/dail...

#ZeroDay #Cisco #Citrix #Zimbra #ThreatIntel

Microsoft: attackers are exploiting a critical Zimbra flaw (CVE-2026-73570) to steal email backups and credentials. One unauthenticated email = remote OS command injection. 274 servers already compromised. Patched July, disclosed 3 weeks later. #CyberSecurity #Zimbra

Zimbra touché par CVE-2026-73570, plus de 274 serveurs compromis pour vol d'emails #Zimbra #Cybersecurite #CVE202673570 presse83.fr/2026/10/01/u...

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
#infosec #Zimbra
https://www.microsoft.com/en-us/security/blog/2026/09/30/unauthenticated-command-injection-on-internet-facing-mail-servers-tracking-cve-2026-73570/

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
#infosec #zimbra
www.microsoft.com/en-us/securi...

Zimbra 취약점 이메일 한 통으로 털린 274곳

https://bit.ly/4rIc4az

#Zimbra #취약점 #보안뉴스 #CyberSecurity #Vulnerability #EmailSecurity #CVE202673570

Attackers exploited Zimbra CVE-2026-73570 via crafted SMTP requests to drop web shells, steal mailbox and auth data, and move laterally using tools like Zimclient2 and AzCopy. #Zimbra #CVE-2026-73570 #CISA

iT4iNT SERVER Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets VDS VPS Cloud #CyberSecurity #Zimbra #CVE2026 #WebShells #Hacking

Unauthenticated Zimbra bug lets attackers plant web shells & steal auth secrets—patch ASAP. #Zimbra #CVE2026-73570 #WebShell #EmailSecurity #CyberThreat #AuthSecrets https://thedailytechfeed.com/attackers-exploit-zimbra-cve-2026-73570-to-plant-web-shells-steal-credentials/

Unauthenticated command injection in the SNMP notification path lets hackers steal session tokens and install persistent webshells on mail servers. #Zimbra #CollaborationSuite

Zimbra CVE-2026-73570 lets one crafted email run code. Microsoft details the Zimbra command injection attacks: web shells, root access, and key theft.

#Zimbra #CVE202673570 #CommandInjection #WebShell #EmailSecurity #MailServer #Microsoft #CyberSecurity

CVE-2026-93642 - zimbra collaboration suite (zcs)
A fake share invitation can be sent to a Zimbra user who is logged in. When the user clicks the invitation, hidden code runs and the attacker can view the user's email…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec

CVE-2026-93641 - zimbra collaboration suite (zcs)
A malicious sender can create a fake share invitation that, when a logged‑in Zimbra Classic user clicks "Accept Share," runs hidden code in the user's browser. This…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec