Skip to content
OpenAdvisories

Package · Debian

zabbix

128 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-23921 Public exploit

    Blind, read-only SQL injection in Zabbix API via sortfield parameter

    A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via the sortfield parameter. Although query results are not returned directly, an attacker can …

    Zabbix Zabbix zabbix zabbix Debian Ubuntu