Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23925 An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentia… https://www.cve.org/CVERecord?id=CVE-2026-23925
Post summary
The statement announces CVE-2026-23925, noting that authenticated Zabbix users with template/host write permissions can create objects through the configuration.import API.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-23925 - Unauthorized host creation via configuration.import API by low-privilege user with write permissions Intel Report: https://ift.tt/7BikWGN
Post summary
The advisory alerts on CVE-2026-23925, noting that low-privilege users with write permissions can create hosts via the configuration.import API. No PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-23925 Zabbix Configuration Import API Unauthorized Host Creation Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23925
Post summary
The content is a simple vulnerability disclosure for CVE-2026-23925, mentioning an unauthorized host creation flaw via Zabbix's configuration import API.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zabbix | zabbix | - | - | - |