VDB
CVE-2026-1199
CVE-2026-1199
PUBLISHED
CVSS 6.9 MEDIUM
Reported by Zabbix · Published August 18, 2026
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Risk Scores
CVSS 4.0
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zabbix | Zabbix | 6.0.0, 7.0.0, 7.4.0 |
| Zabbix | Zabbix | 6.0.0, 7.0.0, 7.4.0 |
Timeline
- Aug 18, 2026 CVE Published
- Aug 22, 2026 Coalition ESS Score
- Aug 24, 2026 EPSS Score
- Aug 30, 2026 EPSS Score
- Sep 1, 2026 CVE Updated
- Sep 5, 2026 Security Advisory