~/article/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure-hsnmb4

critical2026-10-01 12:55 UTCSource: SecurityWeek

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.

Summary written for cymesh.dev. The full article lives at SecurityWeek.

Referenced CVEs

~/cymesh.net

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

~/related/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure-hsnmb4

2026-10-02 17:02 UTC[high]

The Hacker NewsCVE-2026-63688cloud cve

2026-10-02 12:00 UTC[med]

CISA AdvisoriesCVE-2026-102489CVE-2026-102490cve cisa

2026-10-02 08:50 UTC[crit]

Help Net SecurityCVE-2026-104286zero-day cve

2026-10-02 08:07 UTC[crit]

SecurityWeekCVE-2026-104286zero-day cve

2026-10-02 05:49 UTC[crit]

The Hacker NewsCVE-2026-104286zero-day cve cisa

2026-10-02 00:00 UTC[crit]

CISACVE-2026-102489cve cisa