ZA
Monitoring
Zabbix
On CISA KEVExploited in the wild
129
CVEs
2
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 13High 33Medium 43Low 13
Watch
Add Zabbix to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1199 | 3.7 | Aug 18 | API and Frontend login lockout race condition Affected: 6.0.0 through 6.0.46; 7.0.0 through 7.0.27; 7.4.0 through 7.4.11 |
| CVE-2024-42332 | 3.7 | Nov 27 | New line injection in Zabbix SNMP traps Affected: 6.0.0 before 6.0.34; 6.4.0 before 6.4.19; 7.0.0 before 7.0.4 |
| CVE-2017-2826 | 3.7 | Apr 9 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X Affected: 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.1; 2.4.1; +17 more |
| CVE-2025-27238 | 3.5 | Sep 12 | API hostprototype.get lists data to users with insufficient authorization. Affected: 7.0.0 through 7.0.13; 7.2.0 through 7.2.7 |
| CVE-2024-42325 | 3.5 | Apr 2 | Excessive information returned by user.get Affected: 5.0.0 through 5.0.45; 6.0.0 through 6.0.37; 7.0.0 through 7.0.8; 7.2.0 through 7.2.2 |
| CVE-2024-42331 | 3.3 | Nov 27 | Use after free in browser_push_error Affected: 7.0.0 through 7.0.3 |
| CVE-2024-42329 | 3.3 | Nov 27 | JS - Crash on unexpected HTTP server response Affected: 7.0.0 through 7.0.3rc1 |
| CVE-2024-36469 | 3.1 | Apr 2 | User enumeration via timing attack in Zabbix web interface Affected: 5.0.0 through 5.0.45; 6.0.0 through 6.0.37; 7.0.0 through 7.0.8; 7.2.0 through 7.2.2 |
| CVE-2024-36464 | 2.7 | Nov 27 | Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported Affected: 6.0.0 through 6.0.29; 6.4.0 through 6.4.15; 7.0.0alpha1 through 7.0.0 |
| CVE-2024-42333 | 2.7 | Nov 27 | Heap buffer over-read Affected: 6.0.0 through 6.0.33; 6.4.0 through 6.4.18; 7.0.0 through 7.0.3 |
| CVE-2024-22123 | 2.7 | Aug 9 | Zabbix Arbitrary File Read Affected: 5.0.0 through 5.0.42; 6.0.0 through 6.0.30; 6.4.0 through 6.4.15; 7.0.0alpha1 through 7.0.0rc2 |
| CVE-2026-59783 | 2.3 | Oct 5 | Server DoS via binary items Affected: 7.0.0 through 7.0.28; 7.4.0 through 7.4.12 |
| CVE-2024-22117 | 2.2 | Nov 26 | Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added Affected: 5,0,0 through 5.0.43; 6.0.0 through 6.0.33; 6.4.0 through 6.4.18; 7.0.0 through 7.0.3 |
Showing 13