Поиск уязвимостей
Количество 47
Количество 47
ALT-PU-2026-4858
ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1
ALT-PU-2026-4758
ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1
ALT-PU-2026-8885
ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1
ALT-PU-2026-8730
ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
CVE-2026-23925
An authenticated Zabbix user (User role) with template/host write perm ...
ROS-20260401-80-0049
Уязвимость zabbix7-lts
ROS-20260401-80-0048
Уязвимость zabbix-lts
GHSA-cv64-6j2c-f8cg
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
BDU:2026-05709
Уязвимость универсальной системы мониторинга Zabbix, связанная с недостатками механизма авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260401-73-0049
Уязвимость zabbix7-lts
ROS-20260401-73-0048
Уязвимость zabbix-lts
CVE-2026-23926
An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.
CVE-2026-23926
An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.
CVE-2026-23926
An authenticated (non-super) administrator can create a maintenance pe ...
ALT-PU-2025-16570
ALT-PU-2025-16570: package `zabbix` update to version 7.0.18-alt0.p10.1
ALT-PU-2025-16484
ALT-PU-2025-16484: package `zabbix` update to version 7.0.18-alt0.p11.1
GHSA-v7c2-5wfc-rfff
An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-4858 ALT-PU-2026-4858: package `zabbix` update to version 7.0.24-alt0.p10.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-4758 ALT-PU-2026-4758: package `zabbix` update to version 7.0.24-alt0.p11.1 | CVSS3: 8.4 | 8 месяцев назад | |
| ALT-PU-2026-8885 ALT-PU-2026-8885: package `zabbix` update to version 7.0.27-alt0.p10.1 | CVSS3: 8.4 | 5 месяцев назад | |
| ALT-PU-2026-8730 ALT-PU-2026-8730: package `zabbix` update to version 7.0.27-alt0.p11.1 | CVSS3: 8.4 | 5 месяцев назад | |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 7.6 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
| CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write perm ... | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
 | ROS-20260401-80-0049 Уязвимость zabbix7-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| ROS-20260401-80-0048 Уязвимость zabbix-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| GHSA-cv64-6j2c-f8cg An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
 | BDU:2026-05709 Уязвимость универсальной системы мониторинга Zabbix, связанная с недостатками механизма авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.4 | 0% Низкий | 8 месяцев назад |
| ROS-20260401-73-0049 Уязвимость zabbix7-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| ROS-20260401-73-0048 Уязвимость zabbix-lts | CVSS3: 6.4 | 0% Низкий | 7 месяцев назад |
| CVE-2026-23926 An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23926 An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23926 An authenticated (non-super) administrator can create a maintenance pe ... | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2025-16570 ALT-PU-2025-16570: package `zabbix` update to version 7.0.18-alt0.p10.1 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2025-16484 ALT-PU-2025-16484: package `zabbix` update to version 7.0.18-alt0.p11.1 | CVSS3: 8.1 | около 1 года назад | |
| GHSA-v7c2-5wfc-rfff An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator widget. This can allow the attacker to perform unauthorized actions depending on which user opens the tooltip. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу