{"schema":"vulnpedia.poc/1","cve":"CVE-2026-73570","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-08-21","ransomware":false},"epss":{"score":0.71663,"percentile":0.99416},"cvss":{"version":"3.1","score":8.9,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c1cca26652bd","executable":false,"sourceId":"c1cca26652bd","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c1cca26652bd","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/c1cca26652bd"}],"repositoryUrl":"https://github.com/jishino567/CVE-2026-73570"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0cc67d94df48","executable":false,"sourceId":"0cc67d94df48","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0cc67d94df48","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/0cc67d94df48"}],"repositoryUrl":"https://github.com/gabrielunknown/CVE-2026-73570"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0198c58ded1c","executable":false,"sourceId":"0198c58ded1c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0198c58ded1c","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/0198c58ded1c"}],"repositoryUrl":"https://github.com/BiuTrap/CVE-2026-73570"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f0ba3245d1bc","executable":false,"sourceId":"f0ba3245d1bc","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f0ba3245d1bc","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/f0ba3245d1bc"}],"repositoryUrl":"https://github.com/juanpoch/CVE-2026-73570"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/48e5a1bf583b","executable":false,"sourceId":"48e5a1bf583b","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"48e5a1bf583b","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/48e5a1bf583b"}],"repositoryUrl":"https://github.com/hainhc/CVE-2026-73570"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/30ec9d7a1463","executable":false,"sourceId":"30ec9d7a1463","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"30ec9d7a1463","modified":"2026-08-17T00:00:00Z","url":"https://vulncheck.com/xdb/30ec9d7a1463"}],"repositoryUrl":"https://github.com/0xBlackash/CVE-2026-73570"}],"poc_candidates":[{"url":"https://github.com/HORKimhab/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"CVE-2026-73570","modified":"2026-10-13T19:11:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/HORKimhab/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-10-13T19:11:16Z","url":"https://github.com/HORKimhab/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/BiuTrap/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"CVE-2026-73570 PoC","modified":"2026-09-02T06:22:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/BiuTrap/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-09-02T06:22:11Z","url":"https://github.com/BiuTrap/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/jishino567/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"PoC for CVE-2026-73570 (Zimbra SMTP Command Injection)","modified":"2026-10-25T14:30:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/jishino567/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-10-25T14:30:00Z","url":"https://github.com/jishino567/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/gabrielunknown/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"Zimbra SNMP Notification OS Command Injection — Unauthenticated RCE via SMTP exploit (Poc)","modified":"2026-09-14T05:13:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/gabrielunknown/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-09-14T05:13:27Z","url":"https://github.com/gabrielunknown/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"Wazuh Rules for Detection Zimbra (CVE-2026-73570).","modified":"2026-08-28T12:59:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-08-28T12:59:58Z","url":"https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules"}],"tags":[]},{"url":"https://github.com/dahnutz/zimbra-cve-2026-73570-ir","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"Detection-first, evidence-preserving incident-response toolkit for Zimbra CVE-2026-73570. Includes read-only host checks, IOC feeds, triage, persistence, containment, and recovery guidance based on sanitized incident evidence.","modified":"2026-10-18T22:06:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/dahnutz/zimbra-cve-2026-73570-ir"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-10-18T22:06:54Z","url":"https://github.com/dahnutz/zimbra-cve-2026-73570-ir"}],"tags":[]},{"url":"https://github.com/juanpoch/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection (CVSS 8.9, CISA KEV)","modified":"2026-09-13T19:51:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/juanpoch/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-09-13T19:51:35Z","url":"https://github.com/juanpoch/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/hainhc/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-09-10T07:19:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/hainhc/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-09-10T07:19:15Z","url":"https://github.com/hainhc/CVE-2026-73570"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-73570","source":"poc-in-github","sourceId":"CVE-2026-73570","description":"CVE-2026-73570","modified":"2026-10-06T17:44:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-73570","url":"https://github.com/0xBlackash/CVE-2026-73570"},{"source":"poc-in-github","sourceId":"CVE-2026-73570","modified":"2026-10-06T17:44:41Z","url":"https://github.com/0xBlackash/CVE-2026-73570"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-73570 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-73570/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-73570.yaml","template":"network/cves/2026/CVE-2026-73570.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-73570%22&type=repositories","executable":false}]}