CVE-2026-1199 | BDVDB-2026-360751 Detail
ZabbixZabbix
Description#
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Impact#
CAPEC-29: Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
Weaknesses#
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.