ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

T2Critical 100Covered by 1 source · first reported by InfoQ at 13 Oct, 13:13 UTC

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are…

dev security

Sources

T2ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code ExecutionInfoQ13 Oct, 13:13

Vulnerabilities

CVE-2026-73570

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
epss high	20
public poc — 8 repositories	20