Skip to content
Threat Feed
Subscribe

Product

Zabbix (< 7.4.6)

1 brief RSS
high advisory

Zabbix: SQL injection in API sortfield parameter (CVE-2026-23921)

A time-based blind SQL injection vulnerability in Zabbix API (CVE-2026-23921) allows authenticated attackers to exfiltrate database data via malicious input to the sortfield and groupBy parameters.

Zabbix +2 cve-2026-23921 sql-injection
1r 1t 1c