CISA has issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
Summary + source link. No paywalls, no tracking.