CVE-2025-27236 | Zabbix up to 6.0.40/7.0.16/7.2.10/7.4.0 API authorization

October 3, 2025 Yanac

A vulnerability was found in Zabbix up to 6.0.40/7.0.16/7.2.10/7.4.0. It has been rated as problematic. The affected element is an unknown function of the component API. This manipulation causes incorrect authorization.

This vulnerability appears as CVE-2025-27236. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More