Skip to content
OpenAdvisories
Medium WID-SEC-2025-2703 3 CVEs

Zabbix: Mehrere Schwachstellen

Published Nov 30, 2025 · Updated Mar 8, 2026 · Revision 3 · de-DE

Vendor: Fedora Vendor: Zabbix Product: Linux Product: Zabbix

Summary

Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand zu verursachen.

Product

Zabbix ist ein Open-Source Netzwerk-Monitoringsystem.

Vulnerabilities 3

  • Medium 6.8
    CVE-2025-27232

    Frontend arbitrary file read in oauth.authorize action

    An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

    Zabbix Zabbix zabbix zabbix Ubuntu Alpine
  • Medium 6.0
    CVE-2025-49643

    Frontend DoS vulnerability due to asymmetric resource consumption

    An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.

    Zabbix Zabbix zabbix zabbix Debian Ubuntu Alpine
  • Medium 5.8
    CVE-2025-49642

    Agent builds for AIX vulnerable to library loading hijacking

    Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.

    Zabbix Zabbix

Revision history

  1. #3

    Neue Updates von Fedora aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2025-199985, EUVD-2025-199986, EUVD-2025-199987

  3. #1

    Initiale Fassung

References