Zimbra Security Advisories and Releases wiki

zimbra-security-advisories · A · candidate

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

vendor-psirtlang: enfetch failures: 0quiet periods: 0last fetch: 2026-10-02

Added 2026-10-02: first-party advisory table and per-release security-fix lists for Zimbra Collaboration, a repeatedly exploited groupware product run by public bodies (cited in this run's Zimbra update). RECIPE: `extract <wiki URL>` (verified 2026-10-02); the page names an advisory feed https://wiki.zimbra.com/security-advisory-feed.php (no details). (2026-10-02T0404Z-intel)

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

CVE-2026-73570, Zimbra Collaboration: a pre-auth command injection patched without a CVE in July is exploited, with probing before disclosure and root escalation, secret theft and cluster-wide movement observed2026-08-20