Threat actors hacked hundreds of servers by exploiting Zimbra CVE-2022-41352 bug

CVE-2022-41352 is an unpatched remote code execution vulnerability in Zimbra Collaboration Suite that is being abused in the wild. The vulnerability is due to the method (cpio) in which Zimbra’s antivirus engine (Amavis) scans inbound emails.