Exposure of Zabbix

Miscellaneous
32
exposure score
6
sites use
0
exploited
9
critical

CVEs

87 results
CVE-2026-23927MEDIUMAgent 2 Oracle plugin TNS connection string injection via the 'service' parameterEPSS 0.2%CVE-2026-59786MEDIUMActive agent heartbeat missing TLS checkEPSS 0.2%CVE-2025-27238LOWAPI hostprototype.get lists data to users with insufficient authorization.EPSS 0.2%CVE-2025-27233MEDIUMZabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.EPSS 0.2%CVE-2026-59781MEDIUMImproper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.EPSS 0.2%CVE-2026-59785MEDIUMHidden host credentials inferable via multiselect.get filteringEPSS 0.2%CVE-2025-49642MEDIUMAgent builds for AIX vulnerable to library loading hijackingEPSS 0.1%