Servers and applications
CVE-2025-27238
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
- Severity
- Low 2.1
- Published
- 12 Sept 2025
- Last changed
- 19 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 7.0.14, 7.2.8
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ZabbixServers and applications · cpe:a:zabbix:zabbix |
|