CVE-2025-27234 | Zabbix Agent 2 smartctl Plugin up to 5.0.46 Parameter smart.disk.get os command injection (WID-SEC-2025-2042)

SecurityVulns

A vulnerability, which was classified as critical, has been found in Zabbix Agent 2 smartctl Plugin up to 5.0.46. This affects an unknown part of the file smart.disk.get of the component Parameter Handler. The manipulation leads to os command injection.

This vulnerability is referenced as CVE-2025-27234. The attack needs to be initiated within the local network. No exploit is available.VulDB Recent EntriesRead More