Remote code execution affecting Zimbra Collaboration

cPanel & WHM is a web hosting management platform providing centralized interfaces for server administration and site hosting. Zimbra Collaboration is an email solution and collaboration platform that helps manage emails, calendars and contacts. This product is affected by a vulnerability labeled CVE-2026-73570 resulting from insufficient sanitization of untrusted inputs when processing SNMP notifications. Exploitation of this vulnerability would allow an unauthenticated attacker to send specially crafted SMTP requests that could result in arbitrary commands being executed on the operating system as the Zimbra user. It is classified as high with a severity score of 8.9 according to CVSS v3.1.

• This vulnerability only affects installations for which the optional zimbra-snmp package is installed and SNMP notifications are enabled, and affects versions of Zimbra Collaboration prior to 10.1.20;