Sploitus

43 exploited vulnerabilities in Zabbix

Vulnerabilities with publicly known exploits

Vendors
Astra Linux, Suse, Zabbix, Alt Linux, Debian, Red Os
With known exploits
43
Affected Zabbix Frontend versions
≤ 4.0.44, 5.0.29, 6.0.9, 6.2.4, 5.0.30, 6.0.11, 6.2.5
Affected Zabbix versions
< 6.0.32, 6.4.17, 7.0.1, 6.0.12, 6.2.6, 5.4.8, 6.0.0, 1.8.17, 2.0.8, 2.1.7, 2.2.13, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.8.9, 1.8.10, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.8.18, 1.8.19, 1.8.20, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.3.0, 4.4, 1.6.6, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.4.2, 1.4.3, 1.4.4, 1.4.6, 5.0.33, 6.0.15, 6.4.1, 6.4.4, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.2.10, 2.2.11, 2.2.12, 7.0.0, 6.0.14, 6.4.0, 4.4.0, 1.8.21, 1.1, 1.1.1, 1.1.6, 1.1.7, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.4.5, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.7, 1.6.8, 1.6.9, 1.7, 1.7.1, 4.0.34, 4.2.8, 4.4.11, 5.0.20, 1.7.4, 1.7.2, 1.7.3, 5.0.42, 6.0.30, 6.4.15, 2.2.20, 3.0.12, 3.2.9, 3.4.3, 5.0.40, 6.0.24, 6.4.9, 4.0.0, 5.0.25, 6.0.4
Affected Golang Net versions
< 0.55.0
Affected Microsoft Windows Firewall versions
All versions
Affected Grafana versions
≤ 7.3.4

Vulnerabilities with exploits

Highest CVSS first — 19 of these already have exploit code on Sploitus

CVE-2022-43515
CVSS 10.0 CRITICAL 2022-10-18
CVE-2024-42327 13 exploits
CVSS 9.9 CRITICAL 2024-11-27FIX AVAILABLE
Exploit for CVE-2024-42327Zabbix 7.0.0 - SQL Injection
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2022-43516
CVSS 9.8 CRITICAL 2022-12-05
CVE-2022-26148
CVSS 9.8 CRITICAL 2021-01-29FIX AVAILABLE
CVE-2022-23131 9 exploits
CVSS 9.8 CRITICAL 2019-05-20
Exploit for Authentication Bypass by Spoofing in ZabbixExploit for OS Command Injection in Gnu Bash
CVE-2013-3738
CVSS 9.8 CRITICAL 2020-02-17
CVE-2013-5743 9 exploits
CVSS 9.8 CRITICAL 2014-01-21FIX AVAILABLE
Zabbix httpmon.php SQL InjectionZABBIX API及Frontend多个SQL注入漏洞(CVE-2013-5743)
CVE-2016-10134 23 exploits
CVSS 9.8 CRITICAL 2014-09-21FIX AVAILABLE
Vuln2Action-DemoZabbix toggle_ids SQL Injection
CVE-2014-3005
CVSS 9.8 CRITICAL 2014-06-14FIX AVAILABLE
CVE-2019-17382 4 exploits
CVSS 9.4 CRITICAL 2018-10-05
Exploit for Authorization Bypass Through User-Controlled Key in ZabbixZabbix 3.4.7 - Stored XSS
CVE-2009-4502 3 exploits
CVSS 9.3 HIGH 2009-12-31FIX AVAILABLE
Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)Zabbix Agent net.tcp.listen Command Injection
CVE-2023-29450
CVSS 8.5 HIGH 2023-02-23
CVE-2017-2824 23 exploits
CVSS 8.1 HIGH 2014-07-18FIX AVAILABLE
Exploit for SQL Injection in ZabbixExploit for SQL Injection in Zabbix
CVE-2016-4338 5 exploits
CVSS 8.1 HIGH 2014-07-18FIX AVAILABLE
Zabbix Agent 3.0.1 mysql. size shell command injectionZabbix Agent 3.0.1 - mysql.size Shell Command Injection
CVE-2024-36462
CVSS 7.8 HIGH 2024-08-09
CVE-2023-29451
CVSS 7.8 HIGH 2023-03-10
CVE-2013-7484
CVSS 7.8 HIGH 2013-09-10FIX AVAILABLE
CVE-2014-9450
CVSS 7.5 HIGH 2014-09-21FIX AVAILABLE
CVE-2013-6824
CVSS 7.5 HIGH 2013-12-09FIX AVAILABLE
CVE-2012-3435 2 exploits
CVSS 7.5 HIGH 2012-08-15FIX AVAILABLE
Zabbix 2.0 SQL InjectionZabbix 2.0.1 - Session Extractor
CVE-2011-4674 2 exploits
CVSS 7.5 HIGH 2011-12-02FIX AVAILABLE
Zabbix <= 1.8.4 SQL InjectionZabbix 1.8.4 - 'popup.php' SQL Injection
CVE-2010-1277
CVSS 7.5 HIGH 2010-04-06FIX AVAILABLE
CVE-2009-4499 1 exploit
CVSS 7.5 HIGH 2009-12-31FIX AVAILABLE
Zabbix Server - Multiple Vulnerabilities
CVE-2006-6693
CVSS 7.5 HIGH 2006-12-21FIX AVAILABLE
CVE-2006-6692 1 exploit
CVSS 7.5 HIGH 2006-12-21FIX AVAILABLE
Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities
CVE-2021-46088
CVSS 7.2 HIGH 2021-08-20FIX AVAILABLE
CVE-2017-2825 1 exploit
CVSS 7.0 HIGH 2016-02-16
Zabbix Proxy Server SQL Database Write Vulnerability (CVE-2017-2825)
CVE-2009-4498 5 exploits
CVSS 6.8 MEDIUM 2009-12-31FIX AVAILABLE
Zabbix Server Arbitrary Command ExecutionZabbix Server Arbitrary Command Execution
CVE-2026-25680
CVSS 6.5 MEDIUM 2026-05-22
CVE-2013-3628 5 exploits
CVSS 6.5 MEDIUM 2013-11-21FIX AVAILABLE
Immunity Canvas: ZABBIXZabbix Authenticated Remote Command Execution Vulnerability
CVE-2024-22121
CVSS 6.1 MEDIUM 2024-08-09FIX AVAILABLE
CVE-2016-10742
CVSS 6.1 MEDIUM 2014-09-21FIX AVAILABLE
CVE-2024-22119
CVSS 5.5 MEDIUM 2023-11-22
CVE-2022-35229
CVSS 5.4 MEDIUM 2018-10-05
CVE-2011-3263
CVSS 5.0 MEDIUM 2011-08-19FIX AVAILABLE
CVE-2009-4501 1 exploit
CVSS 5.0 MEDIUM 2009-12-31FIX AVAILABLE
Zabbix Server - Multiple Vulnerabilities
CVE-2025-10630
CVSS 4.3 MEDIUM 2025-09-19FIX AVAILABLE
CVE-2017-2826
CVSS 4.3 MEDIUM 2016-02-16
CVE-2011-2904
CVSS 4.3 MEDIUM 2011-08-19FIX AVAILABLE
CVE-2008-1353 1 exploit
CVSS 4.3 MEDIUM 2008-03-17FIX AVAILABLE
Zabbix 1.1x/1.4.x - File Checksum Request Denial of Service
CVE-2013-5572 4 exploits
CVSS 3.5 LOW 2013-10-01
Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)Zabbix 2.0.5 - Cleartext ldap_bind_password Password Disclosure (MSF) Exploit
CVE-2007-6210 1 exploit
CVSS 2.1 LOW 2007-12-04FIX AVAILABLE
Zabbix 1.1.4/1.4.2 - 'daemon_start' Local Privilege Escalation