CVE-2026-73570: Synacor Zimbra Collaboration

1. A public proof of concept: not reached

2. A nuclei template that exploits rather than only fingerprints: not reached

3. A merged Metasploit module: not reached

4. Exploitation attempts reported by a named party: not reached

5. A KEV listing (the date added): reached 2026-08-21

• Pulse's own check 2026-08-21
  KEV catalog 2026.10.21
  capture pulse: raw/us/registry/cisa-kev/kev-json/20261022T221059Z/text.txt, 22 October 2026, 22:10 UTC, sha256 97336b5231c74981 original

6. knownRansomwareCampaignUse: Known on KEV: not reached

7. A national CERT reporting compromises in its country: reached 2026-10-05

• CSIRT Italia (ACN), Italy reached, 2026-10-05

  third-party text, as Pulse recorded it
  Bollettino - 05/10/26 14:24 / Zimbra ZCS: rilevato sfruttamento di vulnerabilità in versioni non aggiornate / Questo CSIRT ha rilevato, nel contesto nazionale, molteplici compromissioni di sistemi Zimbra Collaboration Suite esposti su rete pubblica, ascrivibili in larga parte allo sfruttamento della vulnerabilità CVE-2026-73570 e, in misura minore, di ulteriori falle note su istanze non aggiornate o obsolete. I vettori analizzati evidenziano l'esecuzione remota di codice con i privilegi dell'utenza applicativa e il mantenimento dell'accesso mediante webshell e attività pianificate.

  Pulse: A national CERT reporting multiple compromises of systems in its country, attributed in large part to this CVE, with webshells and scheduled tasks. No victim is named.
  capture watch:oq9gflln: raw/it/cert/acn/csirt-italia/20261022T150854Z/text.txt, 22 October 2026, 15:08 UTC, sha256 017a44aaca479c2d original

8. A named organisation saying it was compromised through that flaw: not reached

a victim's own statement is recorded by hand from a capture; none recorded