Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a nowpatched security flaw in Zimbra Collaboration Suite ZCS to deploy web shells and access mailbox data according to findings from the Microsoft Security Research team The attack exploits CVE202673570 CVSS score 89 an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management Protocol