L
Oct 4, 2026Lateral Movement Across Zimbra Clusters via CVE-2026-73570
Shared SSH trust between Zimbra nodes let CVE-2026-73570 attackers spread from one mailbox server to the cluster.
Oct 4, 20262 min read0 reactions0 comments
Back to articles
Tag archive
#zimbra
T
Oct 3, 2026The Five-Month Gap: Zimbra Exposure Between Zero-Day Exploitation and Public Disclosure
The Five-Month Gap: Zimbra Exposure Between Zero-Day Exploitation and Public...
Oct 3, 20263 min read0 reactions0 comments
W
Oct 1, 2026Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail Server
Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail...
Oct 1, 20263 min read0 reactions0 comments
Z
Sep 28, 2026Zimbra Behind a Reverse Proxy: Finding Mail Servers That Refuse to Identify Themselves
Zimbra Behind a Reverse Proxy: Finding Mail Servers That Refuse to Identify...
Sep 28, 20263 min read0 reactions0 comments
S
Sep 26, 2026Sizing the Zimbra Perimeter That Email Attackers Actually Touch
Sizing the Zimbra Perimeter That Email Attackers Actually Touch CISA advisory AA26-204A,...
Sep 26, 20263 min read1 reactions0 comments
R
Jul 26, 2026Russian Global Webmail Espionage
⚠️ Region Alert: UAE/Middle East Unit 42 has uncovered a persistent cyberespionage campaign tracked...
Jul 26, 20261 min read0 reactions0 comments
C
Jul 13, 2026Critical XSS Flaw in Zimbra Classic Web Client Enables Arbitrary Code Execution
Zimbra's Classic Web Client suffers a critical stored XSS vulnerability that lets crafted emails run malicious code, risking mailbox data and session hijacking. Update to version 10.1.19 now.
Jul 13, 20262 min read0 reactions0 comments
Z
Feb 6, 2023Zimbra Mail 8.8.15 - mta trust networks
Zimbra Mail 8.15 - mta trust networks error /var/log/zimbra.log Jan 9 11:01:22 mail amavis[98061]:...
Feb 6, 20231 min read0 reactions0 comments