Exploited Zimbra Flaw Highlights Shrinking Window to Patch

CISA added a critical Zimbra RCE vulnerability (CVE-2026-73570) — exploitable without authentication when SNMP notifications are enabled — to its Known Exploited Vulnerabilities catalog after reports of active exploitation, requiring federal agencies to mitigate within three days; the article warns that the vulnerability can expose mail, calendars and attachments and urges treating affected servers as incident-response cases rather than routine patches.