The vulnerability of the Zabbix universal monitoring system, related to improper storage of permissions, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Zabbix universal monitoring system lies in insufficient validation of input data, which allows attackers to escalate their privileges.

The vulnerability of the Zabbix universal monitoring system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ROS-20250110-05

The vulnerability of the Zabbix universal monitoring system server is related to the use of uncontrolled format strings when processing HttpRequest objects. format strings when processing HttpRequest objects. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain...

ROS-20250110-06

The vulnerability of the Zabbix universal monitoring system server is related to the use of uncontrolled format strings when processing HttpRequest objects. format strings when processing HttpRequest objects. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain...

Exploit for CVE-2024-42327

Zabbix-CVE-2024-42327 RCE PoC...

PT-2025-37305

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: A flaw exists in the Zabbix API where the hostprototype.get method inappropriately lists all host prototypes to users lacking assigned user groups. Recommendations: At the moment, there is n...

PT-2025-37304

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 versions 5.0 and earlier Description: The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, potentially allowing an attacker to inject unexpected arguments into the smartctl command. This can...

PT-2025-37306

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: A Zabbix administrator can inject arbitrary SQL during the autoremoval of hosts. This is achieved by inserting malicious SQL into the Visible name field. Recommendations: At the moment, ther...

PT-2025-37303

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, which allows an attacker to inject unexpected arguments into the smartctl command. This can b...

Zabbix 6.0.x < 6.0.32rc1, 6.4.x < 6.4.17rc1, 7.0.x < 7.0.1rc1 Authentication Bypass (ZBX-25635)

The version of Zabbix installed on the remote host is prior to 6.0.32rc1, 6.4.17rc1 and 7.0.1rc1. It is therefore affected by authentication bypass vulnerability. - A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

The vulnerability of the es_browser_get_variant() function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the esbrowsergetvariant function in the universal monitoring system Zabbi is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to trigger a Denial-of-Service attack...

The vulnerability in the `src/libs/zbxembed/browser.c` script of the Zabbix monitoring system allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability in the src/libs/zbxembed/browser.c script of the Zabbix monitoring system relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to trigger a Denial-of-Service Attack DoS...

The vulnerability of the webdriver_session_query function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the webdriversessionquery function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service Attack...

The vulnerability of the curl_write_cb() function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the curlwritecb function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a Denial-of-Service attack...

ROS-20241216-06

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

ROS-20241216-03

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

ROS-20241216-04

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

ROS-20241216-01

Vulnerability of zbxsnmpcachehandleengineid function of Universal Monitoring System proxy server Zabbix is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in Zabbix...

ROS-20241216-05

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

ROS-20241216-02

Vulnerability of zbxsnmpcachehandleengineid function of Universal Monitoring System proxy server Zabbix is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in Zabbix...