Поиск уязвимостей
Количество 16
Количество 16
BDU:2026-05709
Уязвимость универсальной системы мониторинга Zabbix, связанная с недостатками механизма авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260401-73-0049
Уязвимость zabbix7-lts
ROS-20260401-73-0048
Уязвимость zabbix-lts
ALT-PU-2025-16570
ALT-PU-2025-16570: package `zabbix` update to version 7.0.18-alt0.p10.1
ALT-PU-2025-16484
ALT-PU-2025-16484: package `zabbix` update to version 7.0.18-alt0.p11.1
ALT-PU-2026-4858
ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1
ALT-PU-2026-4758
ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1
ALT-PU-2026-8885
ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1
ALT-PU-2026-8730
ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write perm ...
ROS-20260401-80-0049
Уязвимость zabbix7-lts
ROS-20260401-80-0048
Уязвимость zabbix-lts
GHSA-cv64-6j2c-f8cg
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-05709 Уязвимость универсальной системы мониторинга Zabbix, связанная с недостатками механизма авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.4 | 0% Низкий | 8 месяцев назад |
 | ROS-20260401-73-0049 Уязвимость zabbix7-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| ROS-20260401-73-0048 Уязвимость zabbix-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2025-16570 ALT-PU-2025-16570: package `zabbix` update to version 7.0.18-alt0.p10.1 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2025-16484 ALT-PU-2025-16484: package `zabbix` update to version 7.0.18-alt0.p11.1 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2026-4858 ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-4758 ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-8885 ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1 | CVSS3: 8.4 | 5 месяцев назад | |
| ALT-PU-2026-8730 ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1 | CVSS3: 8.4 | 5 месяцев назад | |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 7.6 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
| CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write perm ... | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
| ROS-20260401-80-0049 Уязвимость zabbix7-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| ROS-20260401-80-0048 Уязвимость zabbix-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| GHSA-cv64-6j2c-f8cg An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу