CVE-2026-59783: Server DoS via binary items
Published Oct 5, 2026
·Updated
The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database.
Affected Software
2 affected components
Zabbix Zabbix server
Zabbix Zabbix Proxy
Event History
Oct 5, 2026
CVE Published
via MITRE·10:28 AM
Data Sourced
via MITRE·10:28 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Only Zabbix Server or Zabbix Proxy deployments that use MySQL or MariaDB as the Zabbix database are affected. Deployments using another database are not identified as affected by the provided information.
2
What must an attacker be able to do to trigger the issue?
The issue is triggered through binary items containing certain NULL-byte input. The provided information does not specify the access level or interface required to submit such input.
3
What is the expected impact?
A successful trigger can crash the Zabbix Server or Proxy, causing a loss of availability.