June 29, 2022 at 09:00AM

■■■■□ Zero-Day: Zimbra Mail pre-auth RCE via Path Traversal bug in unrar (CVE-2022-30333). Zimbra has been the target of a 0day campaign likely conducted by a state actor. More details in this blog post.

https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/

https://t.me/cKure/11564