CVE-2022-23131 CISA KEV · Actively exploited
zabbix: Unsafe client-side session storage leading to authentication bypass / instance takeover via Zabbix Frontend with configured SAML
CVSS score
9.1
EPSS probability
%95.7
Risk score
17.4
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
dagowda/Zabbix-cve-2022-23131-SSO-bypass
Makefile Go / Python
GitHub
Zabbix Frontend Authentication Bypass Vulnerability
Makefile Go / Python
GitHub
CVE-2022-23131 Zabbix Server SAML authentication exploit
Makefile Go / Python
clearcdq/Zabbix-SAML-SSO-_CVE-2022-23131
Makefile Go / Python
Nuclei: Zabbix - SAML SSO Authentication Bypass
Makefile Go / Python
Similar Vulnerabilities
3.7
CVE-2022-23134 Actively exploited
zabbix: Possible view of the setup pages by unauthenticated users if config file already exists
Z
Workaround Public Exploits:2EPSS %95
8.8
CVE-2026-23921
SQL injection in Zabbix
Z
Patch status unknown Public Exploits:2EPSS %4
7.7
CVE-2026-23933
Hardcoded session key in Zabbix 7.4
Z
Patch status unknownEPSS %0
8.8
CVE-2026-23920
OS command injection in Zabbix
Z
Patch status unknownEPSS %0
6.8
CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest body
Z
Patch status unknownEPSS %0
6.5
CVE-2025-49643
Vulnerability in Zabbix Frontend
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-23131"