EP. 149: Hackers Can Turn a Zimbra Email Into Remote Code Execution

The Digital Warfare Podcast · Aug 24, 2026 · 4m · transcript

Summary

CVE-2026-73570 is an actively exploited OS command injection vulnerability affecting Zimbra Collaboration Suite versions before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. The vulnerability carries a CVSS v3.1 score of 8.9.

An unauthenticated attacker can send specially crafted SMTP traffic that results in arbitrary operating-system commands executing as the Zimbra user. Zimbra patched the vulnerability in version 10.1.20, released July 20.

CISA added the vulnerability to its KEV catalog on August 21 after confirmed exploitation and…