Vulnerabilidades en Zabbix
100 resultadosCVE-2026-23928HIGHStored XSS vulnerability in the Item history/Plain text widgetEPSS 0.3%CVE-2026-23929HIGHPrototype pollution leading to stored XSSEPSS 0.3%CVE-2026-23919HIGHInsufficient isolation of JavaScript (Duktape) execution context on Zabbix ServerEPSS 0.3%CVE-2026-59788MEDIUMStored XSS vulnerability in OAuth configuration formEPSS 0.3%CVE-2024-42329LOWJS - Crash on unexpected HTTP server responseEPSS 0.2%CVE-2026-23924MEDIUMAgent 2 Docker plugin arbitrary file read via Docker API injectionEPSS 0.2%CVE-2026-59782MEDIUMJavaScript preprocessing memory disclosureEPSS 0.2%CVE-2024-42326MEDIUMUse after free vulnerability in browser.cEPSS 0.2%CVE-2024-42328LOWJS - Crash on empty HTTP server responseEPSS 0.2%CVE-2024-22121MEDIUMZabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exeEPSS 0.2%CVE-2026-1199MEDIUMAPI and Frontend login lockout race conditionEPSS 0.2%CVE-2026-59783LOWServer DoS via binary itemsEPSS 0.2%CVE-2026-59787MEDIUMSNMP trap injection in zabbix_trap_receiver.plEPSS 0.2%CVE-2026-23927MEDIUMAgent 2 Oracle plugin TNS connection string injection via the 'service' parameterEPSS 0.2%CVE-2026-59786MEDIUMActive agent heartbeat missing TLS checkEPSS 0.2%CVE-2025-27238LOWAPI hostprototype.get lists data to users with insufficient authorization.EPSS 0.2%CVE-2025-27233MEDIUMZabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.EPSS 0.2%CVE-2026-59785MEDIUMHidden host credentials inferable via multiselect.get filteringEPSS 0.2%CVE-2026-59781MEDIUMImproper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.EPSS 0.2%CVE-2025-49642MEDIUMAgent builds for AIX vulnerable to library loading hijackingEPSS 0.1%