As cited
Copy frozen at (site build).
vulnerabilities
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
At least 274 internet-facing Zimbra servers have been compromised via CVE-2026-73570, according to the Shadowserver Foundation. The vulnerability, which has a CVSS score of 8.9 and is under active exploitation, affects unpatched Zimbra instances. The article also notes emerging artificial intelligence (AI) supply chain risks appearing in developer workflows.
Why it matters: Organizations running Zimbra need to immediately check for patched status and apply mitigations for CVE-2026-73570, which is actively exploited against exposed instances; developers and security teams should monitor AI supply chain risks affecting their tooling.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
At least 274 internet-facing Zimbra servers have been compromised via CVE-2026-73570, according to the Shadowserver Foundation. The vulnerability, which has a CVSS score of 8.9 and is under active exploitation, affects unpatched Zimbra instances. The article also notes emerging artificial intelligence (AI) supply chain risks appearing in developer workflows.
Why it matters: Organizations running Zimbra need to immediately check for patched status and apply mitigations for CVE-2026-73570, which is actively exploited against exposed instances; developers and security teams should monitor AI supply chain risks affecting their tooling.
- Source published
- First seen by Cybersecurity Tracker