← Database

CVE-2025-27240

HIGH CVSS: 7.2 Published: 2025-09-12 Modified: 2026-06-17

Description

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.

Affected Platforms

Zabbix Zabbix

Weakness Type

CWE-89

References