NCSC-VD-2608-004-02
Severity Level: High
Reference No.: NCSC-VD-2608-004-02
Zimbra
Description
CVE-2026-73570: Remote code execution is possible when the optional zimbra-snmp package is installed and SNMP notifications are enabled. An unauthenticated attacker can send crafted SMTP requests to execute operating-system commands with Zimbra user privileges.
Vulnerabilities
- CVE-2026-73570
Remote code execution is possible when the optional zimbra-snmp package is installed and SNMP notifications are enabled. An unauthenticated attacker can send crafted SMTP requests to execute operating-system commands with Zimbra user privileges.