ACTIVELY EXPLOITED
CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability
| Vendor | Zabbix |
|---|---|
| Product | Frontend |
| Actively exploited | Yes |
| Added to CISA KEV | 22 Feb 2022 |
| CISA federal deadline | 8 Mar 2022 |
| Weakness (CWE) | CWE-284 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
SOURCES
Other Zabbix flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.