Known Vulnerabilities for products from Zabbix
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Zabbix".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59781 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-23938 json | Not Provided | 2026-08-18 | 2026-08-18 | |
| CVE-2026-23937 json | Not Provided | 2026-08-18 | 2026-08-18 | |
| CVE-2026-23935 json | Not Provided | 2026-08-18 | 2026-08-18 | |
| CVE-2026-23933 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-23925 json | An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration... | Not Provided | 2026-03-06 | 2026-06-05 |
| CVE-2026-1199 json | Not Provided | 2026-08-18 | 2026-08-18 | |
| CVE-2023-32726 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.1 - HIGH | 2023-12-18 | 2024-01-24 |
| CVE-2023-32724 json | Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory acces... | 8.8 - HIGH | 2023-10-12 | 2023-10-17 |
| CVE-2023-32723 json | Request to LDAP is sent before user permissions are checked. | 9.1 - CRITICAL | 2023-10-12 | 2024-01-24 |
| CVE-2023-32722 json | The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open. | 7.8 - HIGH | 2023-10-12 | 2023-10-17 |
| CVE-2023-32721 json | A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL. | 5.4 - MEDIUM | 2023-10-12 | 2024-01-24 |
| CVE-2023-30958 json | A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's C... | 6.1 - MEDIUM | 2023-08-03 | 2023-11-07 |
| CVE-2023-29458 json | Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many... | 7.5 - HIGH | 2023-07-13 | 2023-07-25 |
| CVE-2023-29457 json | Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script c... | 6.1 - MEDIUM | 2023-07-13 | 2023-08-22 |
| CVE-2023-29456 json | URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme... | 5.4 - MEDIUM | 2023-07-13 | 2023-08-22 |
| CVE-2023-29455 json | Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application... | 6.1 - MEDIUM | 2023-07-13 | 2023-08-22 |
| CVE-2023-29454 json | Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web appli... | 5.4 - MEDIUM | 2023-07-13 | 2023-08-22 |
| CVE-2023-29453 json | Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backtic... | 9.8 - CRITICAL | 2023-10-12 | 2023-10-24 |
| CVE-2023-29452 json | Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attributi... | 5.4 - MEDIUM | 2023-07-13 | 2023-07-25 |
Known software with vulnerabilities from Zabbix
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Zabbix | Zabbix | 1.0 |