Organisation

Zimbra

Zimbra develops the Zimbra Collaboration Suite mail and collaboration platform.

As of October 2026, Zimbra develops mail and collaboration software that organisations can run on their own servers, placing the product inside customer-controlled infrastructure.

Last refreshed: 22 October 2026

Key Question

Why did a monitoring feature, not Zimbra's webmail, open the door to attackers?

Timeline for Zimbra

#15 21 Oct

Mentioned in: PHP2Shell: no fix for PHP 8.1 and older

Cybersecurity: Threats and Defences

#13 2 Sept

Mentioned in: KEV three-day deadline share fell to 71%

Cybersecurity: Threats and Defences

#13 17 Aug

Fixed CVE-2026-73570 in Zimbra Collaboration 10.1.20

Cybersecurity: Threats and Defences: CERT Polska finds Zimbra flaw under attack

View full timeline →

Background

Zimbra develops the Zimbra Collaboration Suite, a mail and collaboration product that organisations can host on their own servers.

This self-hosted deployment places the software within infrastructure controlled by the customer rather than a fully managed vendor service.

Common Questions

What is Zimbra Collaboration Suite?

Zimbra Collaboration Suite is mail and collaboration software organisations run on their own servers as an alternative to cloud email.

What vulnerability did Zimbra fix in 10.1.20?

Zimbra fixed CVE-2026-73570, an unauthenticated command-injection flaw scoring 8.9, exploited via SNMP notification and swatchdog.Source: CERT Polska

Why were some Zimbra servers exposed to CVE-2026-73570?

The flaw affected Zimbra instances with SNMP notification enabled and swatchdog running, allowing unauthenticated command execution as the Zimbra user.Source: CERT Polska

Source Material

Aktywnie wykorzystywana podatność w Zimbra Collaboration Suite Zimbra frequently asked questions

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.