CVE-2026-23921
SQL injection in Zabbix
CVSS score
8.8
EPSS probability
%3.9
Risk score
0.3
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921
Makefile Go / Python
Caderno Temático NotebookLM: análise de vulnerabilidades SQL Injection (CVE-2024-42327, CVE-2026-23921) no Zabbix, com engenharia de prompts, cadeia de ataque até RCE e miniguia de hardening
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2022-23131 Actively exploited
zabbix: Unsafe client-side session storage leading to authentication bypass / instance takeover via Zabbix Frontend with configured SAML
Z
Workaround Public Exploits:11EPSS %96
3.7
CVE-2022-23134 Actively exploited
zabbix: Possible view of the setup pages by unauthenticated users if config file already exists
Z
Workaround Public Exploits:2EPSS %95
7.7
CVE-2026-23933
Hardcoded session key in Zabbix 7.4
Z
Patch status unknownEPSS %0
8.8
CVE-2026-23920
OS command injection in Zabbix
Z
Patch status unknownEPSS %0
6.8
CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest body
Z
Patch status unknownEPSS %0
6.5
CVE-2025-49643
Vulnerability in Zabbix Frontend
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-23921"