CVE-2024-36468: Zabbix

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. This issue occurs when copying data from session->securityEngineID to local_record.engineid without proper bounds checking.

Affected products

• Zabbix Zabbix: from 7.0.0, before 7.0.3 (fixed in 7.0.3)

Published 2024-11-27. Last modified 2026-06-17.