Critical Zimbra RCE flaw now actively exploited in attacks

A critical remote code execution flaw in Zimbra Collaboration is under active exploitation. The flaw is linked to a command injection vulnerability in Zimbra's SNMP implementation. The Hacker News and BleepingComputer have confirmed the active exploitation, urging immediate patching. The Belgian Cybersecurity and Information Security Agency (CCB) issued a warning, emphasizing the need for urgent action. heise online has also covered the attacks, noting the severity of the command injection vulnerability.

The flaw is being actively exploited in the wild, with attackers targeting Zimbra servers. SecurityWeek and BleepingComputer have both reported on the ongoing exploitation campaigns. The attacks leverage the SNMP flaw to gain unauthorized access and execute malicious code. The urgency of the situation is underscored by the repeated calls for immediate patching from multiple security agencies and outlets.

Organizations using Zimbra Collaboration are advised to apply the necessary patches without delay. The active exploitation of this vulnerability poses a significant risk, as it allows attackers to compromise servers and execute arbitrary code. The Belgian Cybersecurity and Information Security Agency (CCB) has issued a stern warning, urging users to patch immediately. The next steps for affected organizations will involve assessing the extent of the compromise and implementing additional security measures to prevent future attacks.