Zabbix

www.zabbix.com ↗
D
RISKY
34
Total CVEs
6
Crit / High
2
Medium
4%
Unpatched
86%
Patched
6.1
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
86%
Unpatched
4%
Under Review
5%
Pending
4%
✓ 63 patched ✗ 3 unpatched ~ 4 under review ⏳ 3 pending score
▸ Intelligence by Audience
PoC Available
7 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"zabbix" port:443
org:"Zabbix" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-23921 3.94% exploitation probability
CVE-2026-23933 0.36% exploitation probability
CVE-2026-23930 0.36% exploitation probability
CVE-2026-23937 0.31% exploitation probability
CVE-2026-23938 0.30% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
34
Critical severity
4
Actively exploited (CISA)
0
Unpatched ratio
4%
Avg CVSS score
6.1
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-11
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Zabbix Agent and Agent 2 for Windows Vulnerability Let Attackers Escalate Privileges - CyberSecurityNews
CyberSecurityNews 2025-10-06
Critical Vulnerability Found in Zabbix Network Monitoring Tool - SecurityWeek
SecurityWeek 2024-12-02
Zabbix Agent/Agent2 for Windows Vulnerability Could Allow Privilege Escalation - GBHackers News
GBHackers News 2025-10-06
Zabbix Agent & Agent2 Flaw Lets Attackers Escalate Privileges - Cyber Press
Cyber Press 2025-10-06
CISA warns of actively exploited vulnerabilities in Zabbix servers - BleepingComputer
BleepingComputer 2022-02-25
Vulnerability in the Zabbix server | CVE-2024-22116 - Stormshield
Stormshield 2024-08-20
▸ Recent CVEs showing 20 of 73
CVE IDSeverityPatchEPSSDate
CVE-2026-59783 ? N/A UNKNOWN / UNPATCHED — 2026-10-05
CVE-2026-59782 ? N/A UNKNOWN / UNPATCHED — 2026-10-05
CVE-2026-59786 ? N/A UNKNOWN / UNPATCHED — 2026-10-05
CVE-2026-23938 PoC 4.9 MEDIUM UNKNOWN / UNPATCHED 0.30% 2026-08-18
CVE-2026-23933 PoC 9.1 CRITICAL PATCHED / FIX AVAILABLE 0.36% 2026-08-18
CVE-2026-23935 PoC 4.9 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-08-18
CVE-2026-23937 6.5 MEDIUM UNKNOWN / UNPATCHED 0.31% 2026-08-18
CVE-2026-23930 PoC 7.5 HIGH PATCHED / FIX AVAILABLE 0.36% 2026-08-18
CVE-2026-23931 4.3 MEDIUM PATCH UNDER REVIEW 0.28% 2026-08-18
CVE-2026-1199 3.7 LOW PATCH UNDER REVIEW 0.17% 2026-08-18
CVE-2026-59781 PoC 7.8 HIGH PATCHED / FIX AVAILABLE 0.12% 2026-08-18
CVE-2026-23922 PoC 4.9 MEDIUM PATCHED / FIX AVAILABLE 0.27% 2026-08-18
CVE-2026-23934 6.5 MEDIUM PATCH UNDER REVIEW 0.17% 2026-08-18
CVE-2026-23929 PoC 5.4 MEDIUM PATCH UNDER REVIEW 0.18% 2026-08-18
CVE-2026-23928 6.8 MEDIUM PATCHED / FIX AVAILABLE 0.26% 2026-05-06
CVE-2026-23927 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.22% 2026-05-06
CVE-2026-23926 6.8 MEDIUM PATCHED / FIX AVAILABLE 0.26% 2026-05-06
CVE-2026-23924 4.9 MEDIUM PATCHED / FIX AVAILABLE 0.23% 2026-03-24
CVE-2026-23923 5.3 MEDIUM PATCHED / FIX AVAILABLE 0.27% 2026-03-24
CVE-2026-23921 8.8 HIGH PATCHED / FIX AVAILABLE 3.94% 2026-03-24
View all 73 CVEs for Zabbix →
▸Intel
HQRiga, Latvia
Founded2001
CEOAlexei Vladishev
Trust ScoreD — RISKY
Max CVSS9.9
Last Updated2026-07-11
▸Top Weaknesses
CWE-89
SQL Injection
4 occurrences in Zabbix CVEs (12% of total)
CWE-89 ⓘ
4
CWE-20
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-20 ⓘ
2
CWE-862
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-862 ⓘ
2
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) ⓘ
2
CWE-284
Improper Access Control
2 occurrences in Zabbix CVEs (6% of total)
CWE-284 ⓘ
2
CWE-22
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-22 ⓘ
2
CWE-400 (Uncontrolled Resource Consumption)
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-400 (Uncontrolled Resource Consumption) ⓘ
2
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Unknown Weakness Type
2 occurrences in Zabbix CVEs (6% of total)
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) ⓘ
2
▸Company Profile

Zabbix is an open-source monitoring software vendor that provides real-time monitoring of IT infrastructure, networks, and applications. Its platform is widely used for tracking performance, availability, and security events, making it relevant for cybersecurity monitoring and incident response. Zabbix is significant in the industry for its enterprise-grade capabilities and extensive community adoption.

▸Response Metrics
Est. MTTR ⓘ ~57 days (Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -57% better
CVE count 2026 vs 2025:  14 → 6 CVEs
Patch Speed ⓘ Poor (>65% open)
4% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€622K
Est. GDPR High
€6.2M

Based on 4 critical CVEs, 0 CISA KEV, 97% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Zabbix D valtersit.com