CVE-2026-23925 in Zabbixالمعلومات

الملخص

بحسب MITRE • 06/03/2026

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

Zabbix

حجز

19/01/2026

إفشاء

06/03/2026

الاعتدال

تمت الموافقة

إدخال

VDB-349432

EPSS

0.00016

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!