Security Advisory

CVE-2026-23927

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-06 06:59:42

Last updated 2026-05-06 13:00:17

Assigner Zabbix

CVSS score 5.1

State PUBLISHED

Description

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

← Browse all CVEs View on cve.org ↗