Zimbra Product Security Update Advisory (CVE-2026-73570)

Overview

A security update has been released to address a vulnerability in Zimbra products. This update applies to Zimbra Collaboration versions prior to 10.1.20.

Vulnerability Information

• CVE-2026-73570 is a command injection vulnerability in the zimbra-snmp component of Zimbra Collaboration.
• A vulnerability patch has been provided through the latest update.

Recommendations

• Zimbra Collaboration users should update to the latest version with the Vulnerability Patch by following the instructions on the reference site.
• Affected versions are those prior to 10.1.20.

Reference Sites

• Zimbra Security Advisories.
• CVE-2026-73570.