A Vulnerability in Zimbra Collaboration Could Allow for Remote Code Execution

A critical SMTP input‑sanitization flaw (CVE-2024-45519) in Zimbra Collaboration Suite's PostJournal service allows unauthenticated attackers to inject arbitrary commands via crafted SMTP messages, enabling remote code execution under the Zimbra user and potentially leading to privilege escalation, data access/modification, or system compromise. The issue is categorized as Initial Access / Exploit Public‑Facing Application (T1190).