A previously patched security flaw in Zimbra Collaboration (ZCS), CVE-2026-73570 (CVSS 8.9), is now under active exploitation in the wild. This command injection vulnerability can lead to unauthenticated remote code execution. CERT Polska has confirmed the exploitation, urging all Zimbra users to ensure their systems are fully patched.