Skip to content
OpenAdvisories
High WID-SEC-2026-0857 5 CVEs

Zabbix: Mehrere Schwachstellen

Published Mar 24, 2026 · Updated Mar 24, 2026 · de-DE

Vendor: Zabbix Product: Zabbix Platform: Linux

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen, um Shell-Befehle einschleusen, um eine SQL Injection durchzuführen und um einen Denial of Service zu verursachen.

Product

Zabbix ist ein Open-Source Netzwerk-Monitoringsystem.

Vulnerabilities 5

  • High 8.7
    CVE-2026-23921 Public exploit

    Blind, read-only SQL injection in Zabbix API via sortfield parameter

    A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via the sortfield parameter. Although query results are not returned directly, an attacker can …

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • High 7.7
    CVE-2026-23920

    Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection

    Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject …

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • High 7.1
    CVE-2026-23919

    Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server

    For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss where a regular (non-super) Zabbix administrator leaks data for hosts they do not…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • Medium 6.9
    CVE-2026-23923

    Unauthenticated arbitrary PHP class instantiation

    An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but appears limited at this time.

    Zabbix Zabbix
  • Medium 6.1
    CVE-2026-23924

    Agent 2 Docker plugin arbitrary file read via Docker API injection

    Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 can read arbitrary files from running Docker containers by injecting them via the…

    Zabbix Zabbix zabbix zabbix Debian Ubuntu

Revision history

  1. #1

    Initiale Fassung

References