ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

By Olimpiu Pop · InfoQ · Tuesday, 13 October 2026 at 13:13 (50m ago) · Original article ↗

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks.

You're reading a preview. The full article is published by InfoQ on their website.

Read the full story on InfoQ

Security

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]

BleepingComputer 11m ago

Security

Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records

The Danish Central Register of Persons (CPF) was breached through the account of an IT and data services business. The hacker claimed that one of the breached accounts was only protected by a '123456' password.

Tom's Hardware 33m ago

Security

Vision Star Paul Bettany Makes Shock Avengers: Infinity War Script Confession

Everyone knows how seriously Marvel takes script security. The cast of 2015's Avengers Age of Ultron, for example, revealed that pages of the script had to be shredded every day on set to stop the plot leaking online. Marvel doesn’t email scripts, rather has a security guard…

IGN 2h ago

ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

More Security & Privacy

SAP warns of maximum severity OAuth2 SSRF security flaw

Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records

Vision Star Paul Bettany Makes Shock Avengers: Infinity War Script Confession