CISA Advises Immediate Patching for Exploited Zimbra Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for organizations to patch an actively exploited command-injection vulnerability (CVE-2026-73570) in Zimbra Collaboration Suite. This flaw allows arbitrary operating system command execution via crafted SMTP requests when SNMP notifications are enabled. Prompt patching to version 10.1.20 is crucial to prevent potential system compromise.