CVE-2021-46088

Published: Jan 27, 2022Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.

Affected (4)

Products: Zabbix: Zabbix

Zabbix

1 product

Zabbix

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Zabbix Zabbix	From 4.0.0 to 4.0.34
Zabbix Zabbix	From 4.2.0 to 4.2.8
Zabbix Zabbix	From 4.4.0 to 4.4.11
Zabbix Zabbix	From 5.0.0 to 5.0.20

References (2)

https://github.com/paalbra/zabbix-zbxsec-7

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/paalbra/zabbix-zbxsec-7

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.