Skip to content
OpenAdvisories

Vendor

Zabbix

100 known vulnerabilities.

Products

Zabbix 85 Frontend 11 Zabbix agent 2 (MSI packages) 2 Zabbix agent (MSI packages) 1 Proxy, Server 1 Zabbix Server 1 Web Service Report Generation 1 Zabbix < 6.4.0beta5 0 Zabbix Agent <= v6.2.7 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-23921 Public exploit

    Blind, read-only SQL injection in Zabbix API via sortfield parameter

    A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via the sortfield parameter. Although query results are not returned directly, an attacker can …

    Zabbix Zabbix zabbix zabbix Debian Ubuntu
  • High 7.3
    CVE-2025-27237 Public exploit

    DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration

    In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.

    Zabbix Zabbix