0dayNews — ZimbraVulnerabilities, patches, and vendor advisories affecting Zimbra Collaboration Suite — the Classic Web Client, Modern UI, and mailboxd server components — plus the operational impact of Zimbra patch cycles on the organizations still self-hosting webmail. Combined article + CVE feed for the Zimbra beat.https://0daynews.com/en-us270 Zimbra Servers Breached as KEV Deadline Expireshttps://0daynews.com/articles/2026-08-25-zimbra-270-servers-breached-kev-deadline/https://0daynews.com/articles/2026-08-25-zimbra-270-servers-breached-kev-deadline/Attackers have compromised 270+ Zimbra ZCS servers via CVE-2026-73570 SNMP RCE. CISA's Aug 24 KEV patch deadline is past; upgrade to ZCS 10.1.20 now.Tue, 25 Aug 2026 14:00:00 GMTZimbraarticleZimbra SNMP RCE Now Exploited in the Wildhttps://0daynews.com/articles/2026-08-21-zimbra-snmp-rce-exploited/https://0daynews.com/articles/2026-08-21-zimbra-snmp-rce-exploited/CVE-2026-73570, a CVSS 8.9 command injection in Zimbra ZCS, is under active exploitation per CERT Polska. Patch to 10.1.20 or later immediately.Fri, 21 Aug 2026 02:00:00 GMTZimbraarticleVoid Blizzard Exploits Zimbra Flaw for Email Thefthttps://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/https://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/CISA warns Russian state-sponsored Void Blizzard (Laundry Bear) is combining phishing with a patched Zimbra zero-click flaw to steal email from targeted organizations.Thu, 23 Jul 2026 18:00:00 GMTZimbraarticleZimbra 10.1.20 patches nine, SNMP injection at the tophttps://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/https://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/Zimbra 10.1.20 fixes nine vulnerabilities including an SNMP command injection when notifications are enabled. Patch if you self-host — CVEs pending.Tue, 21 Jul 2026 23:45:00 GMTZimbraarticleZimbra ships 10.1.19; Google TAG reported the XSShttps://0daynews.com/articles/2026-07-11-zimbra-10-1-19-classic-web-client-xss-google-tag/https://0daynews.com/articles/2026-07-11-zimbra-10-1-19-classic-web-client-xss-google-tag/Zimbra 10.1.19 patches a stored XSS in the Classic Web Client. No CVE yet, no confirmed exploitation — Google TAG reported it, which is the reason to patch now.Sat, 11 Jul 2026 02:15:00 GMTZimbraarticle