Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Image: The Hacker News
ad slot · in-content video 16:9
Coverage
More coverage
- Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system…