This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-23924 | BDVDB-2026-322263 Detail

ZabbixZabbix

Description#

Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 can read arbitrary files from running Docker containers by injecting them via the Docker archive API.

Impact#

CAPEC-137: Parameter Injection

Weaknesses#

  • CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.