CVE-2026-59787
5.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Summary
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Zabbix | Zabbix | 6.0.0 <= 6.0.47 | affected |
| Zabbix | Zabbix | 7.0.0 <= 7.0.28 | affected |
| Zabbix | Zabbix | 7.4.0 <= 7.4.12 | affected |
Weaknesses
- CWE-143: CWE-143: Improper Neutralization of Record Delimiters
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.