Tag

Zabbix

2 briefs RSS

Zabbix: SQL injection in API sortfield parameter (CVE-2026-23921)

A time-based blind SQL injection vulnerability in Zabbix API (CVE-2026-23921) allows authenticated attackers to exfiltrate database data via malicious input to the sortfield and groupBy parameters.

Zabbix +2 cve-2026-23921 sql-injection

1r 1t 1c 5d ago

medium advisory

Multiple Vulnerabilities in Zabbix

2 rules 1 TTP 3 CVEs

Multiple vulnerabilities in Zabbix versions 6.0.x before 6.0.45, 7.0.x before 7.0.24, and 7.4.x before 7.4.8 allow for data confidentiality breaches and remote cross-site scripting (XSS) attacks.

Zabbix < 6.0.45 +2 zabbix xss vulnerability

2r 1t 3c May 6, 2026