Live › vulnerability › CVE-2022-23134
Go to dashboardZabbix Frontend has an improper access control flaw that lets malicious actors pass step checks and change the configuration of the Zabbix Frontend. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Zabbix Frontend | vendor | – | – |
Unknown from the sources.
Apply updates per vendor instructions (affected and fixed versions not stated in the sources).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
This page as .md · .json · in your agent: get_signal("CVE-2022-23134")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.