CVE-2025-27236

6.5

MEDIUMCVSS v3

Published

October 3, 2025

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.

zabbix

Python Package IndexPython module to work with zabbix.

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

zabbix

Crates.iozabbix

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

Zabbix

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Package Description

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

zabbix

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

zabbix

RubyGemssend data to zabbix from ruby

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

zabbix/zabbix

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 6.0.38, < 6.0.41, >= 7.0.9, < 7.0.17, >= 7.2.3, < 7.2.11, = 7.4.0NVD

Security Advisories

CVE-2025-27236

Description

More on this CVE