Debian/zabbix: unknown
Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report a
Action: Upgrade zabbix to 1:7.0.29+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:7.0.29+dfsg-1 | - |
Fixed versions
| 1:7.0.29+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-59786#Debian:14/zabbix
- https://security-tracker.debian.org/tracker/CVE-2026-59786
published · modified · JSON