Zabbix CVE-2026-23937

Q: What is the CVSS score of CVE-2026-23937?

CVE-2026-23937 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-60740 MEDIUM

Observable Discrepancy (CWE-203)

2026-08-18 Zabbix

GHSA-9mqw-qc3x-x476

Information Disclosure Zabbix

6.0

CVSS 4.0 · Vendor: Zabbix

Severity by source

Vendor (Zabbix) PRIMARY

6.0 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.9 MEDIUM

Network API access with low-privilege auth; AC:H reflects PSK configuration prerequisite (AT:P equivalent); no availability impact applies.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

SUSE

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Primary rating from Vendor (Zabbix).

CVSS VectorVendor: Zabbix

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 18, 2026 - 13:07 vuln.today

CVE Published

Aug 18, 2026 - 12:20 cve.org

MEDIUM 6.0

DescriptionCVE.org

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.

AnalysisAI

Zabbix's API host.get action exposes PSK (Pre-Shared Key) credential material to authenticated low-privileged users, allowing extraction of secrets used to secure TLS-encrypted communications between the Zabbix server and monitored agents. Any authenticated API user can query host.get and retrieve PSK values configured on hosts, undermining the confidentiality of those credentials and the integrity of the monitoring infrastructure they protect. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Zabbix account with at least low-level API access (PR:L per CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N) scores 6.0, reflecting moderate severity with meaningful nuance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade Zabbix to a patched version once released by the vendor - refer to https://support.zabbix.com/browse/ZBX-28074 for the official fix version, as no independently confirmed patch version is available at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Zabbix

View all

CVE-2016-10134 CRITICAL Emergency POC

9.8 Feb 17

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQ

CVE-2017-2824 HIGH Act Now POC

8.1 May 24

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. Rated hi

CVE-2016-4338 HIGH Act Now POC

8.1 Jan 23

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

CVE-2022-43516 CRITICAL Act Now POC

9.8 Dec 05

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in

CVE-2022-43515 CRITICAL Act Now POC

9.8 Dec 05

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addre

CVE-2022-26148 CRITICAL Act Now POC

9.8 Mar 21

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. Rated critical severity (CVSS 9.8), this

CVE-2019-17382 CRITICAL Act Now POC

9.1 Oct 09

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. Rated critical severity

CVE-2024-22120 HIGH This Week POC

8.8 May 17

Zabbix server can perform command execution for configured scripts. Rated high severity (CVSS 8.8), this vulnerability i

CVE-2012-3435 HIGH This Week POC

7.5 Aug 15

SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, a

CVE-2013-6824 HIGH This Week POC

7.5 Dec 19

Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execu

CVE-2023-32728 CRITICAL Act Now

9.8 Dec 18

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resul

CVE-2020-11800 CRITICAL Act Now

9.8 Oct 07

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. Rated critical s

Same weakness CWE-203 – Observable Discrepancy

View all

CVE-2017-5753 MEDIUM POC

5.6

CVE-2017-13099 HIGH POC

7.5

CVE-2017-1000385 MEDIUM POC

5.9

CVE-2017-6168 HIGH POC

7.4

CVE-2017-13098 HIGH POC

7.5

CVE-2017-17427 MEDIUM POC

5.9

CVE-2018-3639 MEDIUM POC

5.5

CVE-2019-25337 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise High Performance Computing 12 SP5	Affected
SUSE Linux Enterprise Server 12 SP5	Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	Affected
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Affected
SUSE Linux Enterprise High Performance Computing 12 SP3	Affected

CVE-2026-23937 vulnerability details – vuln.today

Back

SUSE Linux Enterprise High Performance Computing 12 SP4	Affected
SUSE Linux Enterprise Server 12 SP3-BCL	Affected
SUSE Linux Enterprise Server 12 SP3-ESPOS	Affected
SUSE Linux Enterprise Server 12 SP3-LTSS	Affected
SUSE Linux Enterprise Server 12 SP4	Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS	Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	Affected
SUSE OpenStack Cloud 8	Affected
SUSE OpenStack Cloud 9	Affected
SUSE OpenStack Cloud Crowbar 8	Affected
SUSE OpenStack Cloud Crowbar 9	Affected

Zabbix CVE-2026-23937

Severity by source

CVSS VectorVendor: Zabbix

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

More in Zabbix

Same weakness CWE-203 – Observable Discrepancy

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code