CISA Adds Exploited Vulnerabilities, Orders Fast Zimbra Patching
CISA added two vulnerabilities to its catalog of actively exploited flaws on Aug. 20, following one on Aug. 19 and four on Aug. 18 [1][2][3]. The agency cited Binding Operational Directive 26-04, which requires Federal Civilian Executive Branch agencies to prioritize rapid fixes for high-risk CVEs [1]. CISA also directed federal agencies to patch an exploited Zimbra Collaboration Suite flaw, CVE-2026-73570, within three days; Zimbra fixed it in version 10.1.20, released July 20 [5]. The flaw allows unauthenticated remote code execution through command injection in the SNMP monitoring component when SNMP notifications are enabled [5].
Sources
- cisa.gov · CISA Adds Two Known Exploited Vulnerabilities to Catalog Aug 20, 2026
- cisa.gov · CISA Adds One Known Exploited Vulnerability to Catalog Aug 19, 2026
- cisa.gov · CISA Adds Four Known Exploited Vulnerabilities to Catalog Aug 18, 2026
- cisa.gov · CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards Aug 20, 2026
- bleepingcomputer.com · CISA orders urgent patching of actively exploited Zimbra flaw Aug 24, 2026
- cnbc.com · Small UK power generator shut down after cyberattack linked to Iran: Telegraph Aug 23, 2026
This is the neutral brief the press writes once, for everyone, before each reader’s paper adds its own so-what. It links out; it does not republish. 6 articles clustered.