Security Advisory

CVE-2025-27234

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-12 10:31:58

Last updated 2026-02-26 17:48:39

Assigner Zabbix

State PUBLISHED

Description

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution.

← Browse all CVEs View on cve.org ↗