Vulnerabilities

CVSS

2.1 Low

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Risk score

16.8

Published

2026-08-18

Status

Published

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint.

Weaknesses

CWE-522

Coverage 1

vulnerability

Multiples vulnérabilités dans Zabbix (18 août 2026)

Multiple vulnerabilities have been discovered in Zabbix, potentially allowing attackers to cause a denial of service, compromise data confidentiality, and damage data integrity. These vulnerabilities affect various Zabbi…

CERT-FR · Aug 18, 2026 High

CVE-2026-1199CVE-2026-23922CVE-2026-23929zabbixvulnerabilitypatch

All articles mentioning it

Advisories and references

• support.zabbix.com/browse/ZBX-28067