Unrated severityNVD Advisory· Published Dec 1, 2025· Updated Dec 1, 2025
Frontend DoS vulnerability due to asymmetric resource consumption
CVE-2025-49643
Description
An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.