Critical Zimbra Vulnerability Actively Exploited for Email Theft
A critical security vulnerability in Zimbra collaboration software is under active exploitation, according to security researchers. The flaw allows attackers to remotely inject operating system commands by sending a specially crafted email to a target account. Successful exploitation grants the attacker the ability to access and exfiltrate emails from compromised accounts.
The vulnerability stems from insufficient input validation in Zimbra's email processing system, enabling command injection at the operating system level. Organizations running affected versions of Zimbra are advised to apply security patches immediately and monitor for signs of unauthorized access. This incident highlights the continued targeting of email servers as high-value infrastructure for espionage and data theft operations.