Поиск уязвимостей
Количество 15
Количество 15
BDU:2026-06432
Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный JavaScript-код
ROS-20260707-80-0003
Уязвимость zabbix7.4
ROS-20260707-80-0002
Уязвимость zabbix7-lts
ROS-20260707-80-0001
Уязвимость zabbix-lts
ROS-20260707-73-0003
Уязвимость zabbix7.4
ROS-20260707-73-0002
Уязвимость zabbix7-lts
ROS-20260707-73-0001
Уязвимость zabbix-lts
ALT-PU-2026-4858
ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1
ALT-PU-2026-4758
ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1
ALT-PU-2026-8885
ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1
ALT-PU-2026-8730
ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in ...
GHSA-qjqp-r6hf-xpqh
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-06432 Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный JavaScript-код | CVSS3: 8.4 | 0% Низкий | 6 месяцев назад |
 | ROS-20260707-80-0003 Уязвимость zabbix7.4 | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0002 Уязвимость zabbix7-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0001 Уязвимость zabbix-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-73-0003 Уязвимость zabbix7.4 | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-73-0002 Уязвимость zabbix7-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-73-0001 Уязвимость zabbix-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-4858 ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-4758 ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-8885 ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1 | CVSS3: 8.4 | 5 месяцев назад | |
| ALT-PU-2026-8730 ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1 | CVSS3: 8.4 | 5 месяцев назад | |
 | CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in ... | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| GHSA-qjqp-r6hf-xpqh The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу