p PatchFirst

PatchFirst · Latest vulnerabilities

zabbix 7.4.6: known vulnerabilities · Page 2

Known vulnerabilities affecting zabbix 7.4.6: 22. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 22

  1. CVE-2026-23924

    Medium · CVSS 6.1EPSS 0.24%Fix available

    Agent 2 Docker plugin arbitrary file read via Docker API injection

    Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 can read arbitrary files from running Docker containers by injecting them via the Docker archive API.

    zabbixApplications
    • Update to 7.4.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2026-23923

    Medium · CVSS 6.9EPSS 0.28%Fix available

    Unauthenticated arbitrary PHP class instantiation

    An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but appears limited at this time.

    zabbixApplications
    • Update to 7.4.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →