VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Zimbra× typ: zranitelnost× v celém archivu zrušit filtry

7 karet z 8 položek CZ · EN/orig

· zachyceno

SPOJENO PŘES CVE How CVE-2026-73570 turns a Zimbra log file into remote code execution

When we are building detections for various threats, we regularly run the exploits on representative systems to help us build high-quality rules. The Common Vulnerabilities and Exposures (CVE) entry CVE-2026-73570 for Zimbra is no exception. Zimbra is a widely used enterprise email and collaboration software platform, known for its SMTP platform, among other services. SMTP plays a critical role in the infrastructure of many organizations by providing email services that often include either…

KEV ✓ EPSS 0.72 CVE-2026-73570 Zimbra Synacor veřejná správa US IT HU

tg: varování tg: zneužíváno tg: zranitelnost tg: rozbor tp: malware tp: únik dat tp: identita

· zachyceno · Elastic Security · How CVE-2026-73570 turns a Zimbra log file into remote code execution · CSIRT Itálie (ACN) · Zimbra ZCS: rilevato sfruttamento di vulnerabilità in versioni non aggiornate · Microsoft Security Blog · Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 · NKI Maďarsko · Riasztás a CVE-2026-73570 Zimbra Collaboration Suite szoftvert érintő sérülékenységről · BleepingComputer · Hackers breached over 270 Zimbra servers in ongoing attacks · zachyceno · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog · zachyceno · CISA KEV · Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (CVE-2026-73570)

· zachyceno

Critical vulnerabilities in Zimbra Collaboration Suite

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-93642, CVE-2026-93643, CVE-2026-93647, Summary: CVE-2026-93642 (CVSS: 9.3): An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim. CVE-2026-93643 (CVSS: 9.8): When OnlyOffice/Document Editing is available, an unauthenticated remote…

EPSS 0.01 CVSS 9.8 CVE-2026-93642 CVE-2026-93643 CVE-2026-93647 Zimbra FI

tg: zranitelnost

· zachyceno · NCSC-FI · Critical vulnerabilities in Zimbra Collaboration Suite

Zimbra security advisory (AV26-964)

Serial Number: AV26-964Date: September 25, 2026 As of September 25, 2026, Zimbra is affected by vulnerabilities in the following product: Zimbra Collaboration Suite (ZCS) (Daffodil) Prior to 10.1.21 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. What’s New in Zimbra 10.1.21 (Daffodil) Zimbra Blog - All Things Zimbra

Zimbra CA

tg: zranitelnost

· Cyber Centre Kanada · Zimbra security advisory (AV26-964)

Risolte vulnerabilità su Zimbra Collaboration

Rilasciati aggiornamenti di sicurezza per risolvere diverse vulnerabilità, di cui due con gravità “alta”, in Zimbra Collaboration, nota piattaforma di collaborazione e-mail sviluppata da Synacor Inc. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.

KEV ✓ EPSS 0.72 CVE-2026-50054 CVE-2026-73570 Synacor Zimbra IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità su Zimbra Collaboration