Unpatched Zimbra servers are falling to CVE-2026-73570 attacks
Brief
At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570, the Shadowserver Foundation shared on Monday. About CVE-2026-73570 Zimbra Collaboration Suite (ZCS) is a communication and collaboration platform popular with organizations that need to have control over their data or can’t afford a pricy alternative service like Microsoft 365 or Google Workspace.
CVE-2026-73570 is a code injection flaw Synacor patched in ZCS v10.
- 20, released on July 20, 2026. The vulnerability was … More →
The post Unpatched Zimbra servers are falling to CVE-2026-73570 attacks appeared first on Help Net Security .