Skip to content
OpenAdvisories

Package · Alpine

zabbix

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2025-49643

    Frontend DoS vulnerability due to asymmetric resource consumption

    An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.

    Zabbix Zabbix zabbix zabbix Debian Ubuntu Alpine
  • Medium 6.8
    CVE-2025-27232

    Frontend arbitrary file read in oauth.authorize action

    An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

    Zabbix Zabbix zabbix zabbix Ubuntu Alpine