CVE-2025-27240

7.2

HIGHCVSS v3

Published

September 12, 2025

Affected

6 projects

Assigned by

Severity scale

010

Description

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.

Python Package IndexPython module to work with zabbix.

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD

Crates.iozabbix

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD

NuGet Gallery

Package Description

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD

RubyGemssend data to zabbix from ruby

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 6.0.0, < 6.0.34, >= 6.4.0, < 6.4.19, >= 7.0.0, < 7.0.4NVD