Unrated severityNVD Advisory· Published Sep 12, 2025· Updated Feb 26, 2026
Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host
CVE-2025-27240
Description
A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.