An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

According to its self-reported version number, the version of Zabbix running on the remote host is 6.0.x prior to 6.0.41, or 7.0.x prior to 7.0.18, or 7.4.x prior to 7.4.2. It is, therefore, affected by an incorrect authorization vulnerability in the configuration.import API.

An authenticated user with the User role and template/host write permissions is able to create objects via the configuration.import API, leading to a confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates or hosts, even with write permissions.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Zabbix installed on the remote host is affected by an authorization bypass vulnerability. An authenticated low-privilege user (User role) possessing template and host write permissions can exploit the configuration.import API to create unauthorized objects, despite the User role typically lacking authority to create or modify templates and hosts.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An authenticated Zabbix user (User role) with template/host write permissions is able to create objects     via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts.
    Note that the User role is normally not sufficient to create and edit templates/hosts even with write     permissions. (CVE-2026-23925)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
115520	Zabbix 7.4.x < 7.4.2 Incorrect Authorization	Web App Scanning	Component Vulnerability	Version Based	medium
115519	Zabbix 7.0.x < 7.0.18 Incorrect Authorization	Web App Scanning	Component Vulnerability	Version Based	medium
115518	Zabbix 6.0.x < 6.0.41 Incorrect Authorization	Web App Scanning	Component Vulnerability	Version Based	medium
301859	Zabbix 6.0.x < 6.0.41 / 7.0.x < 7.0.18 / 7.4.x < 7.4.2 Unauthorized Object Creation (ZBX-27567)	Nessus	CGI abuses	Remote	medium
301541	Linux Distros Unpatched Vulnerability : CVE-2026-23925	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-23925

medium

Tenable Plugins

medium

medium

medium

medium

medium