NewsMicrosoft Threat Intelligence
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Linked advisories
- CVE-2026-73570High-Severity Vulnerability in Zimbra Collaboration Suite
- CVE-2026-73570synacor zimbra_collaboration_suite: Betriebssystem-Befehlsinjektion
- CVE-2026-73570Synacor Zimbra Collaboration Suite (ZCS) — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- CVE-2026-73570Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Affected vendors and products
More on Unauthenticated
Other advisories
- CriticalCVE-2026-121640WatchGuard AuthPoint Gateway: forged auth results, replayed admin actions, MITM and unauthenticated DoS (CVE-2026-121637 to CVE-2026-121640)
- Not ratedosv:CVE-2026-121736NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation
- Not ratedosv:CVE-2026-63482Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data
- Lowghsa:GHSA-m3qr-fvp4-78xjArc has unauthenticated application log disclosure via `/api/v1/logs`
- Not ratedosv:GHSA-m3qr-fvp4-78xjArc has unauthenticated application log disclosure via `/api/v1/logs`
- Not ratedosv:CVE-2026-121555Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb
- CriticalCVE-2026-121802Better Auth's Expo plugin let unauthenticated attackers take over accounts (CVE-2026-121802)
- Not ratedosv:CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route
Other news entries
- Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityNewsCisco PSIRT
- Cisco Identity Services Engine Authorization Bypass VulnerabilityNewsCisco PSIRT
- Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick UploadsNewsThe Hacker News
- Cisco Secure Email Gateway SQL Injection VulnerabilityNewsCisco PSIRT
- Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on ServersNewsThe Hacker News
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- Linux kernel exploit enables remote root attacks on MPTCP serversNewsBleepingComputer
- Critical Linux kernel flaw allows remote root attacks on MPTCP serversNewsBleepingComputer
ID