CVE-2024-22119: Zabbix

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.

Affected products

• Zabbix Zabbix: from 5.0.0, before 5.0.40 (fixed in 5.0.40); from 6.0.0, before 6.0.24 (fixed in 6.0.24); from 6.4.0, before 6.4.9 (fixed in 6.4.9); version 7.0.0 only

Published 2024-02-09. Last modified 2026-06-17.