Skip to content

CVE-2026-73570

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-73570. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Tracking CVE-2026-73570: unauthenticated command injection on internet-facing mail servers
    writeup2026-09-30

    Unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path. Exploitable via a specially crafted SMTP/email request that introduces untrusted input into SNMP notification processing, allowing shell commands to execute with the privileges of the zimbra

  • When Business Email Compromise Starts Rewriting Reality
    writeup2026-09-24

    Unauthenticated command injection through SNMP notification handling. CISA added it to KEV on August 21 of this year (2026) and gave federal agencies three days to remediate. Shadowserver counted north of 260 compromised instances while hunting for exploitation artifacts.

All cves in this workspace.