← Database

CVE-2025-27238

LOW CVSS: 3.5 Published: 2025-09-12 Modified: 2026-06-17

Description

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.

Affected Platforms

Zabbix Zabbix

Weakness Type

CWE-284

References