CISA Mandates Federal Agencies Patch Actively Exploited Zimbra Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to immediately patch a critical vulnerability, CVE-2026-73570, in the Zimbra Collaboration Suite. This flaw is currently being exploited by malicious actors, allowing them to impersonate users and execute unauthorized actions due to inadequate input sanitization. Prompt patching is crucial to mitigate ongoing cyber risks to government systems.