https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:15:13 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1039 certfr-2026-avi-1039 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1039 https://cve.radiocsirt.org/vuln/euvd-2026-355276 EUVD-2026-355276 https://cve.radiocsirt.org/vuln/euvd-2026-355276 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59781 <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59781 https://cve.radiocsirt.org/vuln/ghsa-734c-5898-qrph <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> https://cve.radiocsirt.org/vuln/ghsa-734c-5898-qrph https://cve.radiocsirt.org/vuln/jvndb-2026-000124 <p>Zabbix agent provided by Zabbix LLC may load Dynamic Link Libraries insecurely due to the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/276.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-59781&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Incorrect default permissions (CWE-276) - CVE-2026-59781&lt;/li&gt;&lt;/ul&gt;Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Zabbix agent provided by Zabbix LLC may load Dynamic Link Libraries insecurely due to the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/276.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-59781&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Incorrect default permissions (CWE-276) - CVE-2026-59781&lt;/li&gt;&lt;/ul&gt;Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000124 https://cve.radiocsirt.org/vuln/ncsc-2026-0320 NCSC-2026-0320 https://cve.radiocsirt.org/vuln/ncsc-2026-0320 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59781 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:26.04:LTS: zabbix</p> <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:26.04:LTS: zabbix</p> <p>When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59781 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2916 <p>Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen oder zu manipulieren, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service herbeizuführen, um einen Cross-Site Scripting Angriff durchzuführen und potenziell um Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um Informationen offenzulegen oder zu manipulieren, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service herbeizuführen, um einen Cross-Site Scripting Angriff durchzuführen und potenziell um Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2916