CVE-2022-23134 CISA KEV · Actively exploited
zabbix: Possible view of the setup pages by unauthenticated users if config file already exists
CVSS score
3.7
EPSS probability
%95.3
Risk score
7.0
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Writeup and POC for CVE-2022-23134
Makefile Go / Python
Nuclei: Zabbix Setup Configuration Authentication Bypass
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2022-23131 Actively exploited
zabbix: Unsafe client-side session storage leading to authentication bypass / instance takeover via Zabbix Frontend with configured SAML
Z
Workaround Public Exploits:11EPSS %96
8.8
CVE-2026-23921
SQL injection in Zabbix
Z
Patch status unknown Public Exploits:2EPSS %4
7.7
CVE-2026-23933
Hardcoded session key in Zabbix 7.4
Z
Patch status unknownEPSS %0
8.8
CVE-2026-23920
OS command injection in Zabbix
Z
Patch status unknownEPSS %0
6.8
CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest body
Z
Patch status unknownEPSS %0
6.5
CVE-2025-49643
Vulnerability in Zabbix Frontend
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-23134"