A critical vulnerability affecting Zimbra Collaboration servers is currently being exploited, as reported by CERT Polska. The flaw, identified as CVE-2026-73570, poses a significant threat to enterprise email and collaboration software users.
Zimbra Vulnerability Details
Recently patched by Zimbra’s development team, the vulnerability was addressed with the release of version 10.1.20 on July 20. The security issue arises when the ‘zimbra-snmp’ package is installed and SNMP notifications are activated, leading to potential exploitation without requiring user authentication.
This allows attackers to execute arbitrary commands on the operating system as the Zimbra user, compromising the security of the affected servers.
Active Exploitation and Indicators
CERT Polska has observed active attacks exploiting this flaw but has not disclosed specific details about the campaign. However, it did provide some indicators of compromise (IoCs) to help organizations identify potential breaches.
The motivation and identity of the attackers remain unknown. Nonetheless, the risk is significant, as successful exploitation can lead to complete server control, allowing intruders to maintain access, gather email credentials, and potentially infiltrate other systems.
Implications and Historical Context
The Cybersecurity and Infrastructure Security Agency (CISA) has not yet added CVE-2026-73570 to its Known Exploited Vulnerabilities (KEV) catalog, which currently lists 18 Zimbra vulnerabilities. Four of these vulnerabilities were added in the current year, underscoring the ongoing risks associated with Zimbra’s software.
Historically, Zimbra vulnerabilities have been exploited by state-sponsored groups, particularly from Russia and China, targeting sensitive intelligence sectors. Additionally, opportunistic cybercriminals have exploited these flaws for financial motives.
As organizations grapple with this emerging threat, vigilance and prompt patch application remain crucial to safeguarding sensitive information and maintaining operational integrity.
