EXPLOIT/ALERT Back to feed

Zabbix vulnerability

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

Published 6 May 2026Updated 18 Sep 20261 sources
CVSS 5.1
Overview Sources History

What happened

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

Affected versions

Zabbix: 6.0.0 through 6.0.44 (git); 7.0.0 through 7.0.23 (git); 7.4.0 through 7.4.7 (git) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.

CorrectionsReport an issue