CVE-2025-27232

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-01

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Affected Platforms (CPE)

📦

Zabbix

Frontend

>= 7.4.0 and < 7.4.3

References & Advisories

🔗 https://support.zabbix.com/browse/ZBX-27282

相關漏洞威脅

CVE-2026-14568

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plu...

CVE-2026-663385.4

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently...

CVE-2026-157937.3

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If...

CVE-2026-157926.0

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.