Preview image for a blog post

Zimbra Zero-Day Exploitation: Web Shells and Credential Harvesting Unleashed via CVE-2026-73570

Threat actors weaponize Zimbra's CVE-2026-73570, deploying web shells to harvest authentication secrets and access mailboxes.