VULNERABILITY INTELLIGENCE

CVE-2026-1199

CVSS score3.7 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-08-18
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.

Weakness classification

  • security@zabbix.com: CWE-362

Primary references