CVE-2026-73570 Details.
Zimbra Collaboration Suite < 10.1.20 - OS Command Injection
Atlas does not check this one. Not a plain web check.
This weakness is not found through ordinary web pages. It needs a different kind of connection to the service. Atlas only runs plain web, DNS and TLS checks, so it does not run this one.
About CVE-2026-73570. What It Means.
Zimbra Collaboration Suite (ZCS) before version 10.1.20 is vulnerable to OS command injection in the SNMP notification processing due to improper input sanitization. According to the NVD, when SNMP notifications are enabled and the zimbra-snmp package is installed, an unauthenticated attacker can inject arbitrary commands using crafted SMTP requests that result in malicious log entries. The swatchdog service monitors the log, and upon matching a pattern, passes the log conte…
Affected Product. What Is Hit.
- Vendor
- synacor
- Product
- Synacor Zimbra Collaboration Suite
References. Where To Read More.
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://moje.cert.pl/komunikaty/2026/145/aktywnie-wykorzystywana-podatnosc-w-zimbra-collaboration-suite/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-73570
- https://github.com/HORKimhab/CVE-2026-73570
- https://nvd.nist.gov/vuln/detail/CVE-2026-73570
FAQ
Common Questions.
Zimbra Collaboration Suite < 10.1.20 - OS Command Injection. Zimbra Collaboration Suite (ZCS) before version 10.1.20 is vulnerable to OS command injection in the SNMP notification processing due to improper input sanitization. According to the NVD, when SNMP notifications are enabled and the zimbra-snmp package is installed, an unauthenticated attacker can inject arbitrary commands using crafted SMTP requests that result in malicious log entries. The swatchdog service monitors the log, and upon matching a pattern, passes the log conte…
No. This weakness is not found through ordinary web pages. It needs a different kind of connection to the service. Atlas only runs plain web, DNS and TLS checks, so it does not run this one. The facts about CVE-2026-73570 are on this page, and you can request a demo to see how Brandefense watches your whole external attack surface.
Yes. CVE-2026-73570 is on the CISA Known Exploited Vulnerabilities list, which means attackers have used it against real targets.
Update Synacor Zimbra Collaboration Suite to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. Vendor links are listed on this page when they are known.
This page lists the public facts about CVE-2026-73570. Atlas does not run a check for it, so nothing here says whether a particular site is affected.