medium
CERT-FR: Zabbix vulnerability (ZBX-28169) allows data confidentiality breach across 6.0, 7.0, 7.4, 8.0 and 8.2 branches
1 fonte(s)
·
1 atualização(ões)
·
publicado 13/10/2026 21:00
·
coletado há 3 dias
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in the advisory.
Detalhes técnicos
- Affected versions: Zabbix 6.0.x before 6.0.49rc1, 7.0.x before 7.0.32rc1, 7.4.x before 7.4.16rc1, 8.0.x before 8.0.1rc1 and 8.2.x before 8.2.0alpha1.
- Impact: breach of data confidentiality; the advisory does not describe the flaw type or attack conditions.
- No IOCs, CVE IDs or exploitation reports are given.
Remediação
- Consult the Zabbix security bulletin ZBX-28169 to obtain the fixes and upgrade to the fixed versions for each branch.
Linha do tempo
-
CERT-FR: Zabbix vulnerability (ZBX-28169) allows data confidentiality breach across 6.0, 7.0, 7.4, 8.0 and 8.2 branches
ler a análise desta fonte ocultar
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in the advisory.
Technical Details
- Affected versions: Zabbix 6.0.x before 6.0.49rc1, 7.0.x before 7.0.32rc1, 7.4.x before 7.4.16rc1, 8.0.x before 8.0.1rc1 and 8.2.x before 8.2.0alpha1.
- Impact: breach of data confidentiality; the advisory does not describe the flaw type or attack conditions.
- No IOCs, CVE IDs or exploitation reports are given.
Remediation
- Consult the Zabbix security bulletin ZBX-28169 to obtain the fixes and upgrade to the fixed versions for each branch.