Zimbra swatchdog Shell Injection via SNMP Trap

Patrizio Perna@Patrickp88

•updated Aug 21, 2026•11•0•89

Detects unauthenticated command injection in Zimbra Collaboration (CVE-2026-73570). The swatchdog Perl script spawns a shell that chains arbitrary commands after snmptrap, indicating abuse of SNMP notifications via a crafted SMTP sender.