Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

T1Critical 85Covered by 1 source · first reported by Microsoft Security Blog at 30 Sept, 14:00 UTC

Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and mitigation guidance. The post Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 appeared first on Microsoft Security…

security

Sources

• T1Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570Microsoft Security Blog30 Sept, 14:00

Vulnerabilities

• CVE-2026-73570