Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Automatic source update

Microsoft Security published this item on 2026-09-30.

Brief excerpt from the publisher’s feed: “Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and…”

Read the original publication.

This short source notice was imported automatically. It has not received the editorial review of a websec.gr research briefing. The original source contains the complete report, context and any later corrections.

Source publication: 2026-09-30T14:00:00+00:00

Prepared automatically: 2026-10-04T18:00:02+00:00