CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zimbra Collaboration Suite (ZCS) Remote Code Execution Vulnerability Advisory (CVE-2026-73570, CISA KEV Listed)
[Affected Scope] Zimbra Collaboration (ZCS) versions prior to 10.1.20, specifically when the optional zimbra-snmp package is installed and SNMP notifications are enabled.
[Impact] An unauthenticated remote attacker can execute arbitrary operating system commands as the Zimbra user by sending specially crafted SMTP requests.
[Mitigation] Immediately upgrade Zimbra Collaboration to version 10.1.20 or later, or temporarily disable the zimbra-snmp service.
Exim Mail Server string_vformat Heap-based Buffer Overflow Remote Code Execution (RCE) Vulnerability (CVE-2010-4344)
[Affected Scope] Exim Mail Transfer Agent (MTA) versions prior to 4.70
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges and fully compromise the mail server via a crafted SMTP session.
[Mitigation] Immediately upgrade Exim to the latest stable version (4.70 or higher) and restrict SMTP port access to trusted networks until patched.