Two Critical Flaws Hit Ghostscript and Zimbra, Enabling Remote Code Execution
Newly disclosed vulnerabilities in the Ghostscript engine and the Zimbra Collaboration Suite could let attackers run code on affected servers, with one flaw already under active exploitation.
AfroEuropa Newsroom
AfroEuropa desk
Security researchers have detailed two critical vulnerabilities affecting widely used server software, both of which can lead to remote code execution.
According to BleepingComputer, a critical heap buffer overflow in the Ghostscript interpreter and rendering engine, tracked as CVE-2026-39919, could allow remote code execution when a server processes a specially crafted PDF file. The report notes that the issue can be triggered through PDF uploads, exposing systems that handle such documents to potential hijacking.
Separately, InfoQ reported on a critical remote command execution flaw in the Zimbra Collaboration Suite, identified as CVE-2026-73570. The vulnerability stems from improper input sanitization in SNMP handlers and can be exploited without authentication, enabling unauthorized access to mailbox data and credentials. InfoQ said the flaw has been actively exploited.
Keep reading
Anthropic Flags Risk of Self-Replicating AI Spreading Across Smart Devices
In an October 12 report, Anthropic's Frontier Red Team outlined how small AI models could in theory replicate across consumer hardware, though current limits make real-world deployment impractical.
Other highlights
Spanish Fintech ID Finance Raises €545M to Scale Consumer Credit App Plazo
Barcelona-based ID Finance has secured €545 million in debt and equity to expand its consumer finance app Plazo, in one of Spain's larger recent fintech deals.
Follow the story
One newsletter, two continents
The Bridge brings you the tech, startups, and leaders moving between Africa and Europe in one sharp email each morning. No spam, unsubscribe anytime.
