How to fix EUVD-2025-32548?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Is Ubuntu affected by EUVD-2025-32548?

CVE-2025-49641 presents moderate security risk, a incorrect authorization vulnerability rated CVSS 4.3. Attackers could gain access beyond their authorized level. Organizations should apply vendor updates when available and monitor for exploitation.

EUVD-2025-32548

| CVE-2025-49641 MEDIUM

2025-10-03 [email protected]

4.3

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch Released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-32548

CVE Published

Oct 03, 2025 - 12:15 nvd

MEDIUM 4.3

Description

A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems.

Analysis

A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems.

Technical Context

This vulnerability is classified as Incorrect Authorization (CWE-863).

Affected Products

Affected products: Zabbix Zabbix

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +22

POC: 0

Vendor Status

Ubuntu

Priority: Medium

zabbix

Release	Status	Version
trusty	needs-triage	-
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	DNE	-
plucky	ignored	end of life, was needs-triage
upstream	needs-triage	-
questing	needs-triage	-

Debian

Bug #1117448

zabbix

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	1:5.0.8+dfsg-1	-
bullseye (security)	vulnerable	1:5.0.47+dfsg-0+deb11u1	-
bookworm	vulnerable	1:6.0.14+dfsg-1	-
trixie	vulnerable	1:7.0.10+dfsg-2	-
forky, sid	fixed	1:7.0.22+dfsg-1	-
(unstable)	fixed	1:7.0.22+dfsg-1	-

EUVD-2025-32548 vulnerability details – vuln.today

Back

EUVD-2025-32548

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

EUVD-2025-32548

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

External POC / Exploit Code