CVE-2025-27236

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "7.2.3"
                },
                {
                    "fixed": "7.2.11"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "zabbix:zabbix"
        }
    ]
}

References

https://support.zabbix.com/browse/ZBX-27060

Affected packages

Git / github.com/zabbix/zabbix

Affected ranges

Type

GIT

Repo

https://github.com/zabbix/zabbix

Events

Introduced

9bdb1c8ab4ee57c7f55ca648eab6b6d7df816e70

Fixed

40573c111594a4a96aee6c4670e4df252d278bb7

Introduced

05b8b05eefe2352580b4069745ca76fc5d82892d

Fixed

77c670937ef80b42b962004f5528223a505951ce

Introduced

372a4e93c48ecd25aa666949a055a02369031861

Last Affected

372a4e93c48ecd25aa666949a055a02369031861

Database specific

Show details

{
    "cpe": [
        "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:zabbix:zabbix:7.4.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.0.38"
        },
        {
            "fixed": "6.0.41"
        },
        {
            "introduced": "7.0.9"
        },
        {
            "fixed": "7.0.17"
        },
        {
            "introduced": "7.4.0-NA"
        },
        {
            "last_affected": "7.4.0-NA"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

6.*

6.0.38

6.0.39

6.0.39rc1

6.0.40

6.0.40rc1

6.0.41rc1

7.*

7.0.10

7.0.10rc1

7.0.11

7.0.11rc1

7.0.11rc2

7.0.12

7.0.12rc1

7.0.13

7.0.13rc1

7.0.14

7.0.14rc1

7.0.15

7.0.16

7.0.17rc1

7.0.17rc2

7.0.9

7.4.0

7.4.0-NA

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27236.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "44441353669210332823317085755038907956",
                "169285932251912785765675146248437909117",
                "137337491985109912833586754515826829731",
                "191834445266419394386157115469345650418",
                "99701745528081624942106965294441656089",
                "67657961848053022655897260774339542440"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-27236-0435a7ee",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/zabbix/zabbix/commit/77c670937ef80b42b962004f5528223a505951ce",
        "target": {
            "file": "src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "312614962226865881994625562760193464620",
                "243857299040616033543277099011018562380",
                "115047375198210276379139485775260446152",
                "131652300589887294827463178296045152164",
                "24451493220463986177515936334733341608",
                "22616098638544051939022181165573400285"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-27236-eda0a3f5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/zabbix/zabbix/commit/40573c111594a4a96aee6c4670e4df252d278bb7",
        "target": {
            "file": "src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java"
        }
    }
]

vanir_signatures_modified

"2026-07-15T06:21:46Z"