CVE-2024-22121

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.

Scoring

Severity

MEDIUM

CVSS base score

6.1

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

EPSS probability

0.23%

CWE

CWE-281

Published

2024-08-09

Last modified

2026-03-13

Affected products

• Zabbix Zabbix
• Zabbix Zabbix
• Zabbix Zabbix
• Zabbix Zabbix

Weakness type

• CWE-281

Related vulnerabilities

• CVE-2026-88016 — rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination
• CVE-2026-58510 — GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
• CVE-2025-14779 — Improper Access Control via Secret Type Management API in WSO2 Identity Server
• CVE-2026-23556 — oxenstored keeps quota related use counts across domain destruction
• CVE-2026-58494 — Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
• CVE-2026-4360 — Tarfile.extract() doesn't fully respect filter parameter
• CVE-2026-44947 — Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
• CVE-2026-40767 — WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability

Markdown version · Browse all CVEs