Unrated severityNVD Advisory· Published Oct 3, 2025· Updated Oct 3, 2025
Insufficient permission check for the problem.view.refresh action
CVE-2025-49641
Description
A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.