Known vulnerabilities in zabbix7.0
Vendor:
Fedoraproject
Software:
zabbix7.0
Software CPE:
cpe:2.3:o:fedoraproject:zabbix7_0:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153280 - Exposure of sensitive information to an unauthorized actor CVE-2026-59782 |
CWE-200 | Low | 7.0.31-1.el8, 7.0.31-1.el9, 7.0.31-1.el10_2, 7.0.31-1.el10_3, 7.0.31-1.el10_4 | 05.10.2026 |
SB2026100544 SB2026100548 SB2026100549 and 5 more |
||
| #VU153279 - Improper input validation CVE-2026-59783 |
CWE-20 | Low | 7.0.31-1.el8, 7.0.31-1.el9, 7.0.31-1.el10_2, 7.0.31-1.el10_3, 7.0.31-1.el10_4 | 05.10.2026 |
SB2026100544 SB2026100550 SB2026100551 and 3 more |
||
| #VU153278 - Exposure of sensitive information to an unauthorized actor CVE-2026-59785 |
CWE-200 | Low | 7.0.31-1.el8, 7.0.31-1.el9, 7.0.31-1.el10_2, 7.0.31-1.el10_3, 7.0.31-1.el10_4 | 05.10.2026 |
SB2026100544 SB2026100548 SB2026100549 and 5 more |
||
| #VU153277 - Improper Authentication CVE-2026-59786 |
CWE-287 | Medium | 7.0.31-1.el8, 7.0.31-1.el9, 7.0.31-1.el10_2, 7.0.31-1.el10_3, 7.0.31-1.el10_4 | 05.10.2026 |
SB2026100544 SB2026100550 SB2026100551 and 3 more |
||
| #VU153276 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-59787 |
CWE-74 | Low | 7.0.31-1.el8, 7.0.31-1.el9, 7.0.31-1.el10_2, 7.0.31-1.el10_3, 7.0.31-1.el10_4 | 05.10.2026 |
SB2026100544 SB2026100548 SB2026100549 and 5 more |
||
| #VU130254 - Improper input validation CVE-2026-23927 |
CWE-20 | Low | 7.0.26-1.el8, 7.0.26-1.el10_1, 7.0.26-1.el10_2, 7.0.26-1.el10_3 | 06.05.2026 |
SB2026050645 SB2026051010 SB2026051011 and 3 more |
||
| #VU130253 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-23928 |
CWE-79 | Low | 7.0.26-1.el8, 7.0.26-1.el10_1, 7.0.26-1.el10_2, 7.0.26-1.el10_3 | 06.05.2026 |
SB2026050645 SB2026051010 SB2026051011 and 3 more |
||
| #VU106941 - Resource exhaustion CVE-2024-45700 |
CWE-400 | Medium | 7.0.11-1.el8, 7.0.11-1.el9 | 03.04.2025 |
SB2025040345 SB2025040355 SB2025040356 and 5 more |
||
| #VU106940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-45699 |
CWE-79 | Low | 7.0.11-1.el8, 7.0.11-1.el9 | 03.04.2025 |
SB2025040346 SB2025040355 SB2025040356 and 4 more |
||
| #VU106939 - Exposure of sensitive information to an unauthorized actor CVE-2024-36469 |
CWE-200 | Low | 7.0.11-1.el8, 7.0.11-1.el9 | 03.04.2025 |
SB2025040348 SB2025040355 SB2025040356 and 6 more |
||
| #VU106938 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-36465 |
CWE-89 | Medium | 7.0.11-1.el8, 7.0.11-1.el9 | 03.04.2025 |
SB2025040347 SB2025040355 SB2025040357 and 1 more |
||
| #VU106937 - Exposure of sensitive information to an unauthorized actor CVE-2024-42325 |
CWE-200 | Low | 7.0.11-1.el8, 7.0.11-1.el9 | 03.04.2025 |
SB2025040348 SB2025040355 SB2025040356 and 6 more |