The vulnerability, tracked as CVE-2026-73570 (CVSS score: 8.9), is a command injection flaw that allows for unauthenticated remote code execution. The attack vector reportedly involves the SNMP service, which is often overlooked in hardened deployments.

• Product affected: Zimbra Collaboration Suite (ZCS)
• Nature of flaw: Command injection leading to remote code execution
• Access level: Unauthenticated
• Status: Patch available; active exploitation confirmed

CERT Polska's advisory highlights that this is not a theoretical risk but an active threat, urging administrators to verify their instances are updated to the latest patched build immediately. Given the unauthenticated nature of the flaw, any exposed Zimbra server is a potential target.

Organizations running Zimbra should prioritize checking their SNMP configuration and ensuring the latest security patches are applied. Delaying this could leave mail servers—which often hold sensitive data—directly exposed to compromise.

Source: The Hacker News

Is your team already auditing Zimbra instances for exposure, or are you waiting for a more targeted advisory before patching?