CVE-2025-27232

Server-side request forgery in Zabbix Frontend

CVSS score

4.9

EPSS probability

%0.3

Risk score

0.0

Published

10 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.1

CVE-2022-23131 Actively exploitedzabbix: Unsafe client-side session storage leading to authentication bypass / instance takeover via Zabbix Frontend with configured SAML

VendorZabbix ProductFrontend

Workaround Public Exploits:11EPSS %964 y ago

3.7

CVE-2022-23134 Actively exploitedzabbix: Possible view of the setup pages by unauthenticated users if config file already exists

VendorZabbix ProductFrontend

Workaround Public Exploits:2EPSS %954 y ago

8.8

CVE-2026-23921SQL injection in Zabbix

VendorZabbix ProductZabbix

Patch status unknown Public Exploits:2EPSS %46 mo ago

7.2

CVE-2025-27240SQL injection in Zabbix

VendorZabbix ProductZabbix

Patch status unknownEPSS %11 y ago

7.7

CVE-2026-23933Hardcoded session key in Zabbix 7.4

VendorZabbix ProductZabbix

Patch status unknownEPSS %02 mo ago

8.8

CVE-2026-23920OS command injection in Zabbix

VendorZabbix ProductZabbix

Patch status unknownEPSS %06 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-27232"

Server-side request forgery in Zabbix Frontend

Related Security News

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration