IT security 2026-08-22

Level Watchful — 57/100 — 2026-08-22

Watchful day: 2 stories ranked, 1 of the top 2 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (66/100).

1. Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability — 66/100 (CVE-2026-73570)
2. vmware spring ai: In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but i… — 29/100 (CVE-2026-59318)