Vulnerabilities

CVSS

6.9 Medium

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Risk score

55.2

Published

2026-08-18

Status

Published

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.

Weaknesses

CWE-362

Coverage 1

vulnerability

Multiples vulnérabilités dans Zabbix (18 août 2026)

Multiple vulnerabilities have been discovered in Zabbix, potentially allowing attackers to cause a denial of service, compromise data confidentiality, and damage data integrity. These vulnerabilities affect various Zabbi…

CERT-FR · Aug 18, 2026 High

CVE-2026-1199CVE-2026-23922CVE-2026-23929zabbixvulnerabilitypatch

All articles mentioning it

Advisories and references

• support.zabbix.com/browse/ZBX-28076