vendors/zimbra.htmlSecurity news, advisories and CVEs for ZimbraMon, 19 Oct 2026 12:28:44 GMT https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1y8v9y1Wed, 14 Oct 2026 13:00:00 GMTRapid7. An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the identities and workflows…ResearchVulnerability https://www.theregister.com/security/2026/10/01/microsoft-catches-hackers-exploiting-zimbra-bug-before-disclosure/5300543owndanThu, 01 Oct 2026 14:44:00 GMTThe Register. Attackers were probing the mail server flaw weeks before it had a CVE to its nameVulnerability https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/hsnmb4Thu, 01 Oct 2026 12:55:57 GMTSecurityWeek. Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.VulnerabilityZero-day https://arstechnica.com/security/2026/09/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails/aymgz9Wed, 30 Sep 2026 20:44:48 GMTArs Technica. A simple email gives the attackers the ability to remotely inject OS commands.Vulnerability https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html1a5un12Wed, 30 Sep 2026 16:46:29 GMTThe Hacker News. Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9),…Vulnerability