← Database

CVE-2025-27232

MEDIUM CVSS: 4.9 Published: 2025-12-01 Modified: 2026-06-17

Description

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Affected Platforms

Zabbix Frontend

Weakness Type

CWE-918

References