https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:38:15.210162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07354 bdu:2026-07354 2026-10-02T13:38:15.319935+00:00 bdu:2026-07354 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0353 certfr-2026-avi-0353 — De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T13:38:15.319970+00:00 certfr-2026-avi-0353 https://cve.radiocsirt.org/vuln/euvd-2026-292349 EUVD-2026-292349 2026-10-02T13:38:15.319989+00:00 EUVD-2026-292349 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23919 fkie_cve-2026-23919 2026-10-02T13:38:15.320003+00:00

For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss where a regular (non-super) Zabbix administrator leaks data for hosts they do not have access to. A fix has been released that makes the built in Zabbix JavaScript objects read-only, but please be advised that usage of global JavaScript variables is not recommended because their content could be leaked. More information <a href='https://www.zabbix.com/documentation/7.4/en/manual/installation/known_issues#preprocessing-global-variables-are-unsafe'>in Zabbix documentation</a>.

 https://cve.radiocsirt.org/vuln/ghsa-h55g-ww3m-9hq9 GHSA-h55g-ww3m-9hq9 2026-10-02T13:38:15.320036+00:00

For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss where a regular (non-super) Zabbix administrator leaks data for hosts they do not have access to. A fix has been released that makes the built in Zabbix JavaScript objects read-only, but please be advised that usage of global JavaScript variables is not recommended because their content could be leaked. More information <a href='https://www.zabbix.com/documentation/7.4/en/manual/installation/known_issues#preprocessing-global-variables-are-unsafe'>in Zabbix documentation</a>.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23919 UBUNTU-CVE-2026-23919 2026-10-02T13:38:15.320056+00:00

Affected: Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:25.10: zabbix

For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss where a regular (non-super) Zabbix administrator leaks data for hosts they do not have access to. A fix has been released that makes the built in Zabbix JavaScript objects read-only, but please be advised that usage of global JavaScript variables is not recommended because their content could be leaked. More information <a href='https://www.zabbix.com/documentation/7.4/en/manual/installation/known_issues#preprocessing-global-variables-are-unsafe'>in Zabbix documentation</a>.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0857 WID-SEC-W-2026-0857 — Zabbix: Mehrere Schwachstellen 2026-10-02T13:38:15.320088+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen, um Shell-Befehle einschleusen, um eine SQL Injection durchzuführen und um einen Denial of Service zu verursachen.