Zabbix

Latest CVEs · RSS

• CVE-2026-59788 2026-10-05 · CVSS 5.6
  The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL scheme, so a javascript: URL is executed in
• CVE-2026-59787 2026-10-05 · CVSS 5.3
  The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to sen
• CVE-2026-59786 2026-10-05 · CVSS 6.9
  Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access
• CVE-2026-59785 2026-10-05 · CVSS 5.1
  Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a creden
• CVE-2026-59783 2026-10-05 · CVSS 2.3
  The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability.
• CVE-2026-59782 2026-10-05 · CVSS 6.9
  The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resul
• CVE-2026-59781 2026-08-18 · CVSS 5.4
  When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access p
• CVE-2026-23938 2026-08-18 · CVSS 2.1
  An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to
• CVE-2026-23937 2026-08-18 · CVSS 6.0
  The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
• CVE-2026-23935 2026-08-18 · CVSS 6.8
  A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potentia
• CVE-2026-23934 2026-08-18 · CVSS 5.1
  An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api
• CVE-2026-23933 2026-08-18 · CVSS 7.7
  In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation
• CVE-2026-23931 2026-08-18 · CVSS 5.3
  The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidenti
• CVE-2026-23930 2026-08-18 · CVSS 5.3
  An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.test
• CVE-2026-23929 2026-08-18 · CVSS 8.5
  Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous propert
• CVE-2026-1199 2026-08-18 · CVSS 6.9
  Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent
• CVE-2026-23922 2026-08-18 · CVSS 2.1
  The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were mad
• CVE-2026-23928 2026-05-06 · CVSS 7.3
  The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow a
• CVE-2026-23927 2026-05-06 · CVSS 5.1
  A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-con
• CVE-2026-23926 2026-05-06 · CVSS 7.3
  An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that ma
• CVE-2026-23924 2026-03-24 · CVSS 6.1
  Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of
• CVE-2026-23923 2026-03-24 · CVSS 6.9
  An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but
• CVE-2026-23921 2026-03-24 · CVSS 8.7
  A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL sele
• CVE-2026-23920 2026-03-24 · CVSS 7.7
  Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used
• CVE-2026-23919 2026-03-24 · CVSS 7.1
  For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to con