Zimbra

Attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite, a critical flaw allowing unauthenticated OS command execution when SNMP notifications are enabled. Microsoft observed web shells, reverse shells, privilege escalation, remote-access tools, email backups, and credential collection; Shadowserver found 274 compromised instances.