Z
Vendor security profile2 actively exploited CVEs
Zabbix
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical0
CISA KEV2
Public exploit2
Patch rate%0
Avg. CVSS5.9
12-month vulnerability rate
0
2
0
0
5
0
3
0
0
11
0
6
CVE KEV
CVE severity distribution
29toplam CVE
High4 (14%)
Medium20 (69%)
Low3 (10%)
Uncertain2 (7%)
Patch and exploitation view
%0
Verified patch
%7
CISA KEV
%7
Public exploit
0Patch available
0Partial
2Workaround
0Vendor: no patch
27Unknown
Latest vulnerabilities
5.6
CVE-2026-59788
Stored XSS vulnerability in OAuth configuration form
Z
Patch status unknownEPSS %0
5.3
CVE-2026-59787
SNMP trap injection in zabbix_trap_receiver.pl
Z
Patch status unknownEPSS %0
6.9
CVE-2026-59786
Active agent heartbeat missing TLS check
Z
Patch status unknownEPSS %0
5.1
CVE-2026-59785
Hidden host credentials inferable via multiselect.get filtering
Z
Patch status unknownEPSS %0
2.3
CVE-2026-59783
Server DoS via binary items
Z
Patch status unknownEPSS %0
6.9
CVE-2026-59782
JavaScript preprocessing memory disclosure
Z
Patch status unknownEPSS %0
5.4
CVE-2026-59781
Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.
Z
Patch status unknownEPSS %0
2.1
CVE-2026-23938
Server DoS via JavaScript preprocessing or script items
Z
Patch status unknownEPSS %0
6.0
CVE-2026-23937
Host PSK extraction in Zabbix API
Z
Patch status unknownEPSS %0
6.8
CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest body
Z
Patch status unknownEPSS %0