PT-2026-27441 · Zimbra · Zimbra Collaboration Suite

Indoushka · Publicado 2026-03-24 · Atualizado 2026-03-24 · CVE-2025-71275

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite (ZCS) version 8.8.15

Description The Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 contains a command injection issue. Unauthenticated attackers can execute arbitrary system commands by exploiting improper sanitization of the RCPT TO parameter via SMTP injection. Attackers can inject shell expansion syntax through the RCPT TO parameter to achieve remote code execution under the Zimbra service context. The vulnerability is triggered through the SMTP protocol, specifically targeting the RCPT TO parameter.

Recommendations Update Zimbra Collaboration Suite (ZCS) to a version beyond 8.8.15.

Exploit

Correção

RCE

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

CVE-2025-71275

Produtos afetados

Zimbra Collaboration Suite

Referências · 9

• 🔥 https://packetstorm.news/files/id/212108 · Exploit
• https://zimbra.com · Nota
• https://twitter.com/OrizonCyber/status/2036480673448390850 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2036536854284267555 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-71275 · Nota de Segurança
• https://twitter.com/CVEnew/status/2036505771958206629 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2036467944763383854 · Publicação no Twitter
• https://vulncheck.com/advisories/zimbra-collaboration-suite-postjournal-unauthenticated-remote-code-execution-via-smtp-injection · Nota
• https://twitter.com/CveFindCom/status/2036483865594778052 · Publicação no Twitter