HIGHVulnerability
Verified
Global

CISA KEV: Synacor Zimbra Collaboration Suite (ZCS) — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Analysis

Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-21. Remediation due: 2026-08-24.

Indicators of Compromise (1)

CVE (1)
CVE-2026-73570
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 21, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

BNY unveils Pay-to-Wallet technology option for banks

BNY has unveiled a Pay-to-Wallet capability, making it possible for banks to send cross-border payments from bank accounts to participating retail digital wallets, using existing Swift payment messages and correspondent banking infrastructure.

Finextra
MEDIUMVulnerabilityNEW

US banks invited to join Apple Pay class lawsuit

US banks have been given the green light to pursue a class action lawsuit against Apple over historical fees paid for access to the firm's mobile wallet.

Finextra
MEDIUMVulnerability

Cyberattack on Polish medical software provider exposes patient data

Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.

The Record