{"schema_version":1,"title":"Zabbix Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Zabbix Server: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59787, was published on 5 October 2026. Nothing in the last four weeks, down from 4 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/zabbix-server","json_url":"https://junglewise.ai/threats/technologies/zabbix-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/zabbix-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":6,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-59787","slug":"cve-2026-59787-the-perl-snmp-trap-receiver-script-shipped-with-zabbix-does-not","title":"Zabbix SNMP trap receiver record injection in zabbix_trap_receiver.pl","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.953+00:00","url":"https://junglewise.ai/threats/cve-2026-59787-the-perl-snmp-trap-receiver-script-shipped-with-zabbix-does-not"},{"cve":"CVE-2026-59786","slug":"cve-2026-59786-zabbix-server-and-proxy-accept-the-active-agent-heartbeat-message","title":"Zabbix Server and Proxy active agent heartbeat TLS bypass","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.807+00:00","url":"https://junglewise.ai/threats/cve-2026-59786-zabbix-server-and-proxy-accept-the-active-agent-heartbeat-message"},{"cve":"CVE-2026-59783","slug":"cve-2026-59783-the-zabbix-server-proxy-has-a-vulnerability-where-binary-items","title":"Zabbix Server and Proxy denial of service via binary items","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.513+00:00","url":"https://junglewise.ai/threats/cve-2026-59783-the-zabbix-server-proxy-has-a-vulnerability-where-binary-items"},{"cve":"CVE-2026-59782","slug":"cve-2026-59782-the-javascript-preprocessing-duktape-engine-on-zabbix-server-has","title":"Zabbix Server and Proxy JavaScript preprocessing memory disclosure","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.36+00:00","url":"https://junglewise.ai/threats/cve-2026-59782-the-javascript-preprocessing-duktape-engine-on-zabbix-server-has"},{"cve":"CVE-2026-23938","cvss":4.9,"epss":0.0031,"slug":"cve-2026-23938-zabbix-server-and-proxy-denial-of-service-via-javascript","title":"Zabbix Server and Proxy denial of service via JavaScript preprocessing","severity":"medium","exploited":false,"published_at":"2026-08-18T13:17:22.103+00:00","url":"https://junglewise.ai/threats/cve-2026-23938-zabbix-server-and-proxy-denial-of-service-via-javascript"},{"cve":"CVE-2026-23933","cvss":9.1,"epss":0.0036,"slug":"cve-2026-23933-zabbix-frontend-session-key-disclosure-in-database","title":"Zabbix Frontend session key disclosure in database","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:21.567+00:00","url":"https://junglewise.ai/threats/cve-2026-23933-zabbix-frontend-session-key-disclosure-in-database"}],"weekly":[{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Zabbix","slug":"zabbix","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/zabbix"},{"name":"Zabbix Frontend","slug":"frontend","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/frontend"},{"name":"Zabbix Proxy","slug":"zabbix-proxy","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/zabbix-proxy"}],"technology":{"hub":true,"name":"Zabbix Server","slug":"zabbix-server","vendor":{"hub":true,"name":"Zabbix","slug":"zabbix","url":"https://junglewise.ai/threats/vendors/zabbix"},"aliases":[],"category":"monitoring","description":"Zabbix Server is the central component that processes monitoring data.","url":"https://junglewise.ai/threats/technologies/zabbix-server"},"most_severe":[{"cve":"CVE-2026-23933","cvss":9.1,"epss":0.0036,"slug":"cve-2026-23933-zabbix-frontend-session-key-disclosure-in-database","title":"Zabbix Frontend session key disclosure in database","severity":"critical","exploited":false,"published_at":"2026-08-18T13:17:21.567+00:00","url":"https://junglewise.ai/threats/cve-2026-23933-zabbix-frontend-session-key-disclosure-in-database"},{"cve":"CVE-2026-23938","cvss":4.9,"epss":0.0031,"slug":"cve-2026-23938-zabbix-server-and-proxy-denial-of-service-via-javascript","title":"Zabbix Server and Proxy denial of service via JavaScript preprocessing","severity":"medium","exploited":false,"published_at":"2026-08-18T13:17:22.103+00:00","url":"https://junglewise.ai/threats/cve-2026-23938-zabbix-server-and-proxy-denial-of-service-via-javascript"},{"cve":"CVE-2026-59787","slug":"cve-2026-59787-the-perl-snmp-trap-receiver-script-shipped-with-zabbix-does-not","title":"Zabbix SNMP trap receiver record injection in zabbix_trap_receiver.pl","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.953+00:00","url":"https://junglewise.ai/threats/cve-2026-59787-the-perl-snmp-trap-receiver-script-shipped-with-zabbix-does-not"},{"cve":"CVE-2026-59786","slug":"cve-2026-59786-zabbix-server-and-proxy-accept-the-active-agent-heartbeat-message","title":"Zabbix Server and Proxy active agent heartbeat TLS bypass","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.807+00:00","url":"https://junglewise.ai/threats/cve-2026-59786-zabbix-server-and-proxy-accept-the-active-agent-heartbeat-message"},{"cve":"CVE-2026-59783","slug":"cve-2026-59783-the-zabbix-server-proxy-has-a-vulnerability-where-binary-items","title":"Zabbix Server and Proxy denial of service via binary items","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.513+00:00","url":"https://junglewise.ai/threats/cve-2026-59783-the-zabbix-server-proxy-has-a-vulnerability-where-binary-items"},{"cve":"CVE-2026-59782","slug":"cve-2026-59782-the-javascript-preprocessing-duktape-engine-on-zabbix-server-has","title":"Zabbix Server and Proxy JavaScript preprocessing memory disclosure","severity":"info","exploited":false,"published_at":"2026-10-05T11:16:59.36+00:00","url":"https://junglewise.ai/threats/cve-2026-59782-the-javascript-preprocessing-duktape-engine-on-zabbix-server-has"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}