Critical Alert 1 Active Exploit Detected Today

CVE-2026-73570 — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability →
Powered by CVE Watchtower
×
August 22, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-52610NVD

Vulnerability Summary

An arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the web user by specifying a filename in the "saveTemplate" parameter in conjuction with "execute_mode=PREPARE" parameter in the "run.php" endpoint.
Severity Level
CRITICAL(9.1)
Published Date
Aug 18, 2026
Last Modified
Aug 20, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.82%Probability
Root Weakness (CWE)
CWE-22: Path Traversal ↗
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone

External References