CVE-2022-46768

5.9 mediumEPSS 48%

Medium (5.9) in zabbix. EPSS 48% chance of exploitation in the next 30 days.

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2022-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zabbix:web_service_report_generation
zabbix:zabbix-agent2

References

https://support.zabbix.com/browse/ZBX-22087
https://support.zabbix.com/browse/ZBX-22087

Check your stack JSON