Technology

CISA added CVE-2026-73570, an actively exploited OS command-injection vulnerability in Zimbra Collaboration Suite, to its Known Exploited Vulnerabilities catalog on August 21, giving Federal Civilian Executive Branch agencies three days to remediate. The flaw, scored CVSS 8.9, allows unauthenticated attackers to execute arbitrary commands via crafted SMTP requests on systems running the optional zimbra-snmp package with SNMP notifications enabled. A patch has been available since July 20 in Zimbra version 10.1.20; no threat actor or victim count has been publicly confirmed.

OncoSil Medical received FDA Humanitarian Device Exemption approval on 17 August 2026 for its phosphorus-32 microparticle device targeting unresectable, non-metastatic distal cholangiocarcinoma in patients 21 and older. Initial U.S. use is capped at five treatment centers, and the FDA requires a post-approval study of 30 patients followed for up to 24 months to evaluate safety and probable benefit. The HDE pathway does not require demonstrated effectiveness, and the company's projected addressable market of approximately A$80 million is based on its own patient count and pricing assumptions, not FDA determinations.