https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:58:03.616202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1039 certfr-2026-avi-1039 — De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T10:58:03.635731+00:00 certfr-2026-avi-1039 https://cve.radiocsirt.org/vuln/euvd-2026-355277 EUVD-2026-355277 2026-10-02T10:58:03.635768+00:00 EUVD-2026-355277 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23933 fkie_cve-2026-23933 2026-10-02T10:58:03.635784+00:00

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid session cookies, potentially leading to unauthorized access. For other Zabbix deployments this does not have a known impact.

 https://cve.radiocsirt.org/vuln/ghsa-5j5m-c26m-fvc8 GHSA-5j5m-c26m-fvc8 2026-10-02T10:58:03.635813+00:00

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid session cookies, potentially leading to unauthorized access. For other Zabbix deployments this does not have a known impact.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0320 NCSC-2026-0320 — Kwetsbaarheden verholpen in Zabbix 2026-10-02T10:58:03.635830+00:00 NCSC-2026-0320 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23933 UBUNTU-CVE-2026-23933 2026-10-02T10:58:03.635857+00:00

Affected: Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:26.04:LTS: zabbix

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid session cookies, potentially leading to unauthorized access. For other Zabbix deployments this does not have a known impact.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2916 WID-SEC-W-2026-2916 — Zabbix: Mehrere Schwachstellen 2026-10-02T10:58:03.635885+00:00

Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen oder zu manipulieren, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service herbeizuführen, um einen Cross-Site Scripting Angriff durchzuführen und potenziell um Code auszuführen.