CVE-2026-59786

UNKNOWN

Description

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity.

Timeline

Published:October 5th, 2026 11:16 AM

Last modified:October 5th, 2026 12:17 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-940

References & Reports

Advisories, patches, and third-party reports

https://support.zabbix.com/browse/ZBX-28196

Source: NIST NVD · Data may lag official sources by up to one minute