#zimbra

Analysis · May 20, 2026 · Colten Anderson

The Zimbra bug that infected the mail server when it scanned the attachment

In 2022, Zimbra Collaboration Suite got hammered by a cluster of bugs. One didn't even need the victim to click: send a booby-trapped RAR, and the server unpacked it to scan for malware, infecting itself. On-premise email is the keys to the kingdom, and 2022 proved it.