CVE Watch6 de out. de 2026

CVE-2026-59787

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means

CVSS

—

Sem CVSS

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Publicado: 5 de out. de 2026 · Última mod.: 6 de out. de 2026 · CWE-143

EPSS · 30d

0.2%EPSS · 30 dias0.2%

2026-10-082026-11-05

Descrição técnica

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.

Referências oficiais

support.zabbix.comhttps://support.zabbix.com/browse/ZBX-28197

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1071818.1 ALT

49.5%

——15Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.30d