Exploit discussion active in current signal (6 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Rejected reason: This CVE was rejected due to being a duplicate of CVE-2024-45519.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2025-71275 — CVSS 9.8/10 ██████████ Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 contains a command injection vulnerability that... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/KwBKPudqcQ
Post summary
A critical command injection vulnerability (CVE-2025-71275) in Zimbra Collaboration Suite is confirmed, with a patch now available.
🔴 CVE-2025-71275 - Critical Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands b... https://www.thehackerwire.com/vulnerability/CVE-2025-71275/ https://t.co/DFyPMVmFkL
Post summary
A command injection vulnerability (CVE-2025-71275) affecting Zimbra Collaboration Suite 8.8.15 has been disclosed, detailing unauthenticated execution of arbitrary system commands, but no PoC, exploit, patch, or active exploitation information is provided.
CVE-2025-71275 Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitr… https://www.cve.org/CVERecord?id=CVE-2025-71275
Post summary
The text announces that CVE‑2025‑71275 is a command injection flaw in Zimbra Collaboration Suite’s PostJournal service, permitting unauthenticated arbitrary command execution, but provides no PoC, exploit, active use, or patch information.
Zimbra Collaboration Suite PostJournal 8.8.15 Unauthenticated Remote Code Execution via SMTP Injection CVE: CVE-2025-71275 PT-Identifier: PT-2026-27441 Vendor: Zimbra Product: Zimbra Collaboration Suite CVSS: 9.3 Credits: indoushka Description: A critical security vulnerability exists in Zimbra Collaboration Suite (ZCS) PostJournal service version 8.8.15 that allows unauthenticated attackers to execute arbitrary system commands via SMTP injection. The vulnerability is triggered through improper sanitization of the RCPT TO parameter, enabling command injection using shell expansion syntax (e.g., $(COMMAND)). Successful exploitation results in remote code execution under the Zimbra service context without requiring authentication. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2025-71275 • https://packetstorm.news/files/id/212108/ • https://www.zimbra.com/ • https://www.vulncheck.com/advisories/zimbra-collaboration-suite-postjournal-unauthenticated-remote-code-execution-via-smtp-injection #dbugs_vuln
Post summary
The advisory announces a critical unauthenticated remote code execution flaw in Zimbra Collaboration Suite’s PostJournal service, providing detailed technical information and a PoC reference but no patch or evidence of active exploitation.
[CVE-2025-71275: CRITICAL] Critical vulnerability in Zimbra Collaboration Suite (ZCS) 8.8.15 PostJournal service enables attackers to run commands remotely. Ensure immediate patching to safeguard against exp...#cve,CVE-2025-71275,#cybersecurity https://cvefind.com/CVE-2025-71275
Post summary
The tweet warns about a critical remote command execution vulnerability in Zimbra and urges users to apply the available patch immediately.
🚨 CVE-2025-71275: Zim... Shell expansion in SMTP RCPT TO params = instant RCE on every Zimbra 8.8.15 box exposed to mail traffic - no auth needed. #ZimbraRCE #SMTPInjection. https://zerodaysignal.com/vulnerability/CVE-2025-71275 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2025-71275, a shell‑expansion flaw in Zimbra 8.8.15 that permits unauthenticated, instant RCE via SMTP RCPT TO parameters, and links to a vulnerability summary.