CVE-2025-49643

MEDIUM

6.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-01

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.

Affected Platforms (CPE)

📦

Zabbix

Frontend

>= 6.0.0 and < 6.0.42>= 7.0.0 and < 7.0.19>= 7.2.0 and < 7.2.13>= 7.4.0 and < 7.4.3

References & Advisories

🔗 https://support.zabbix.com/browse/ZBX-27284

相关漏洞威胁

CVE-2026-14568

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plu...

CVE-2026-663385.4

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently...

CVE-2026-157937.3

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If...

CVE-2026-157926.0

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.