CVE-2026-23937: Host PSK extraction in Zabbix API
Published Aug 18, 2026
·Updated
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
Affected Software
4 affected components
Zabbix Zabbix API
Zabbix Zabbix>=6.0.0<6.0.47
Zabbix Zabbix>=7.0.0<7.0.28
Zabbix Zabbix>=7.4.0<7.4.12
Event History
Aug 18, 2026
CVE Published
via MITRE·12:20 PM
Data Sourced
via MITRE·12:20 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeaknessAffected Software