News summary · Threat Intelligence

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Reported by Microsoft Security (Microsoft Security Research, Mahesh Mandava and Rajesh Kumar Natarajan)

Summary by Cyber Security News30 Sep 2026, 16:00 CEST

About this summary. This is a short, independently written summary of an article first published by Microsoft Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.microsoft.com/en-us/security/blog/2026/09/30/unauthenticated-command-injection-on-internet-facing-mail-servers-tracking-cve-2026-73570/

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 — Image: Microsoft Security

Attack chain overview Mitigation and protection guidance References Learn More Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path.

Read the full article at Microsoft Security →

CVE-2026-73570 Microsoft

Source attribution: headline and facts are from Microsoft Security (microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.