Astra Linux – vulnerability in Zabbix

An authenticated Zabbix user with the “User” role and write permissions for templates/hosts can create objects via the configuration.import API. This may result in unauthorized hosts being created, thereby compromising confidentiality. It should be noted that the “User” role alone is generally...

CVE-2026-23925

An authenticated Zabbix user User role with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even...

CVE-2026-23925: Incorrect Authorization

An authenticated Zabbix user User role with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even...