← CVE Intelligence

CVE-2026-59787

SNMP trap injection in zabbix_trap_receiver.pl PUBLISHED

Description (CNA)

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbixaffected 6.0.0 through 6.0.47; affected 7.0.0 through 7.0.28; affected 7.4.0 through 7.4.12

CWE

CWE-143

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.