CVE-2025-27231 | Zabbix up to 6.0.40/7.0.17/7.2.11/7.4.1 LDAP Bind password insufficiently protected credentials

October 3, 2025 Yanac

A vulnerability was found in Zabbix up to 6.0.40/7.0.17/7.2.11/7.4.1. It has been declared as problematic. Impacted is an unknown function of the component LDAP Handler. The manipulation of the argument Bind password results in insufficiently protected credentials.

This vulnerability is reported as CVE-2025-27231. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More