> TritonInfoSec News
Home / Oct 01, 2026 / Story
0
#4 The Hacker News general September 30, 2026 at 16:46 UTC

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

By [email protected] (The Hacker News)

AI Summary

Microsoft Security Research confirmed active exploitation of CVE-2026-73570 (CVSS 8.9), an unauthenticated OS command injection flaw in Zimbra Collaboration Suite, enabling attackers to deploy web shells and harvest mailbox authentication data via a single crafted email. The attack requires no user interaction beyond delivery, making it particularly dangerous for organizations running internet-exposed Zimbra instances. Patches are available and should be applied immediately.

Read full article → https://thehackernews.com/2026/09/attackers-exploi…

Relevance score: 87.0/100

# More from October 01

  1. 1
    Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution The Hacker News
  2. 2
    Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected CyberScoop
  3. 3
    Cisco warns of new SD-WAN zero-day exploited in attacks BleepingComputer
  4. 5
    Bitget hacked via zero-day in third-party security products BleepingComputer
  5. 6
    New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses The Hacker News
  6. 7
    Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT The Hacker News
  7. 8
    Alleged ShinyHunters leader arrested in the Netherlands CyberScoop
  8. 9
    Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek
  9. 10
    Over 543,000 valid credentials exposed in public GitHub repositories BleepingComputer