CVE-2026-23925

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

• CWE-863

• https://support.zabbix.com/browse/ZBX-27567Issue Tracking, Mitigation, Vendor Advisory

Published

Mar 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23918Double Free and possible RCE vulnerability in Apache HTTP Se…8.8
• CVE-2026-23919For performance reasons Zabbix Server/Proxy reuses JavaScrip…7.1
• CVE-2026-23920Host and event action script input is validated with a regex…7.7
• CVE-2026-23921A low privilege Zabbix user with API access can exploit a bl…8.7
• CVE-2026-23923An unauthenticated attacker can exploit the Frontend 'valida…6.9
• CVE-2026-23924Zabbix Agent 2 Docker plugin does not properly sanitize the …6.1
• CVE-2026-23926An authenticated (non-super) administrator can create a main…7.3
• CVE-2026-23927A user able to connect to Agent 2 can inject an Oracle TNS c…5.1
• CVE-2026-23928The Item history widget (in Zabbix 7.0+) or the Plain text w…7.3
• CVE-2026-2393A Server-Side Request Forgery (SSRF) vulnerability exists in…7.1
• CVE-2026-23939Improper Limitation of a Pathname to a Restricted Directory …7.5
• CVE-2026-2394Buffer Over-read vulnerability in RTI Connext Professional (…6.5