Zimbra CVE-2026-73570: The SNMP Trap That Became a Shell

An actively exploited command-injection flaw turns a monitoring notification into unauthenticated command execution as the zimbra user. The dangerous part is a feature administrators may barely remem