CVE-2021-46088

PoC —

CVSS 3.1

7.2 high

EPSS

4%p90

Published

Jan 27, 2022 (Jan 27, 2022)

Modified

Jun 17, 2026

Description

Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.

Vendors: zabbix
Products: zabbix
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.