As cited
Copy frozen at (site build).
NCSC-2026-0324 [1.00] [M/H] Kwetsbaarheid verholpen in Zimbra Collaboration Suite
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0324 [1.00] [M/H] Kwetsbaarheid verholpen in Zimbra Collaboration Suite
Zimbra patched a vulnerability in Zimbra Collaboration Suite versions prior to 10.1.20 that allows unauthenticated attackers to execute operating system commands via specially crafted Simple Mail Transfer Protocol (SMTP) requests. The vulnerability requires the zimbra-snmp package to be installed and Simple Network Management Protocol (SNMP) notifications to be enabled.
Why it matters: Organizations running Zimbra Collaboration Suite below version 10.1.20 with SNMP notifications enabled face remote code execution risk from unauthenticated attackers and should upgrade immediately.
- Source published
- First seen by Cybersecurity Tracker