Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:7.0.0:-:*:*:*:*:*:*

part: a version: 7.0.0 update: -

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix (ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/zabbix/zabbix-agent purl2cpe 2026-06-01 10:13:01.958435
pkg:github/zabbix/zabbix purl2cpe 2026-06-01 10:13:01.958436
pkg:rpm/fedora/zabbix purl2cpe 2026-06-01 10:13:01.958437
pkg:rpm/opensuse/zabbix purl2cpe 2026-06-01 10:13:01.958439
pkg:zabbix/zbx/zabbix purl2cpe 2026-06-01 10:13:01.958440

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36466 vulnerable 2026-06-08 06:39:45.052205 Unauthenticated Zabbix frontend takeover when SSO is being used
HIGH (8.8)
A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions.
Published: 2024-11-28T07:19:48.806Z
Updated: 2024-12-04T14:38:41.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.