https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:32:29.039486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07356 bdu:2026-07356 2026-10-02T11:32:29.120128+00:00 bdu:2026-07356 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0353 certfr-2026-avi-0353 — De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T11:32:29.120164+00:00 certfr-2026-avi-0353 https://cve.radiocsirt.org/vuln/euvd-2026-277488 EUVD-2026-277488 2026-10-02T11:32:29.120185+00:00 EUVD-2026-277488 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23920 fkie_cve-2026-23920 2026-10-02T11:32:29.120198+00:00

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

 https://cve.radiocsirt.org/vuln/ghsa-2h5x-h7x4-hm9h GHSA-2h5x-h7x4-hm9h 2026-10-02T11:32:29.120240+00:00

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23920 UBUNTU-CVE-2026-23920 2026-10-02T11:32:29.120318+00:00

Affected: Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:25.10: zabbix

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0857 WID-SEC-W-2026-0857 — Zabbix: Mehrere Schwachstellen 2026-10-02T11:32:29.120371+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen, um Shell-Befehle einschleusen, um eine SQL Injection durchzuführen und um einen Denial of Service zu verursachen.