CVE-2026-1199 in Zabbix

Résumé

par MITRE • 18/08/2026

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Zabbix
• Réserver: 19/01/2026
• Divulgation: 18/08/2026
• Modérer: accepté
• Entrée: VDB-391570
• CPE: prêt
• CWE: CWE-287 (confirmé)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: très faible
• Secteur: Insurance, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-1199
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-1199
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-1199/