CVE-2026-73570KEV · OVERDUECWE-78command-injection

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

High · published August 13, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.9. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

61
days past CISA
deadline
CVSS v3.1
8.9
EPSS
72%
Percentile
99.4
In the wild
Confirmed
What it is

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

The record
Technical detail
CVSS v3.1
8.9 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.71663 · 99.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-08-13T20:19Z
KEV added
2026-08-21 · due 2026-08-24
Affected products (1)
ProductVersionsFixed in
synacor/zimbra_collaboration_suite< 10.1.2010.1.20
References (4)
https://wiki.zimbra.com/wiki/Security_Center · [email protected]https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories · [email protected]https://moje.cert.pl/komunikaty/2026/145/aktywnie-wykorzystywana-podatnosc-w-zimbra-collaboration-suite/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-73570 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 07 OCT 03:42Z
    EPSS moved 12% → 72%
    epss
  • 25 SEP 03:27Z
    EPSS moved 32% → 12%
    epss
  • 04 SEP 03:44Z
    EPSS moved 21% → 32%
    epss
  • 28 AUG 06:52Z
    EPSS moved 2% → 21%
    epss
  • 13 AUG 15:19Z
    A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP…
    cvelistv5