Vendor
ZA
Zabbix
No CISA KEV deadline is open. CISA last added a Zabbix CVE on 22 Feb 2022.
- Open KEV deadlines
- 0
- Added to KEV · 90 days
- 0
- High exploit odds · current
- 0
- Articles · 7 days
- 0
Exploited, by due date2
Zabbix CVEs in CISA KEV with their federal deadlines. None is open.
| CVE | Product | Added | Federal deadline | Articles |
|---|---|---|---|---|
| CVE-2022-23131Zabbix Frontend Authentication Bypass Vulnerability | Frontend | 22 Feb | Passed 8 Mar | – |
| CVE-2022-23134Zabbix Frontend Improper Access Control Vulnerability | Frontend | 22 Feb | Passed 8 Mar | – |
Patch cadence and exploit odds
How often CISA adds Zabbix CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
Show as tableHide table
| Quarter | Added |
|---|---|
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
No additions in the last eight quarters.
Fix listed
1 of 1 CVE in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2025-27237 | 27.1 |
Coverage0 articles · all time
No CyberSIXT article names Zabbix yet.
All CVEs in coverage1
Exploited first, then by EPSS
| CVE | CISA KEV | CVSS | EPSS | Articles |
|---|---|---|---|---|
| CVE-2025-27237DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration | – | – | 0.3% | – |