Two Critical Flaws Hit Ghostscript and Zimbra, Enabling Remote Code Execution
Newly disclosed vulnerabilities in the Ghostscript engine and the Zimbra Collaboration Suite could let attackers run code on affected servers, with one flaw already under active exploitation.
AfroEuropa Newsroom
AfroEuropa desk
Security researchers have detailed two critical vulnerabilities affecting widely used server software, both of which can lead to remote code execution.
According to BleepingComputer, a critical heap buffer overflow in the Ghostscript interpreter and rendering engine, tracked as CVE-2026-39919, could allow remote code execution when a server processes a specially crafted PDF file. The report notes that the issue can be triggered through PDF uploads, exposing systems that handle such documents to potential hijacking.
Separately, InfoQ reported on a critical remote command execution flaw in the Zimbra Collaboration Suite, identified as CVE-2026-73570. The vulnerability stems from improper input sanitization in SNMP handlers and can be exploited without authentication, enabling unauthorized access to mailbox data and credentials. InfoQ said the flaw has been actively exploited.
Keep reading
Mozilla, Google and Apple Block Compromised eMudhra Certificates
Certificate authority eMudhra revoked eight intermediate certificates after researchers found their private keys could be recovered almost instantly.
Other highlights
Oppo Find X10 Pro Max Pairs Triple 200MP Cameras With Hasselblad Teleconverter Kit
Oppo's new flagship offers three 200-megapixel cameras, a 2nm chip and a 7,150mAh battery, plus an optional Hasselblad telephoto accessory lens.
Follow the story
One newsletter, two continents
The Bridge brings you the tech, startups, and leaders moving between Africa and Europe in one sharp email each morning. No spam, unsubscribe anytime.
