VULNERABILITY INTELLIGENCE
CVE-2025-27237
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-10-03
Last modified2026-10-19
Description
In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.
Weakness classification
- security@zabbix.com: CWE-427