CVE-2026-59787: SNMP trap injection in zabbix_trap_receiver.pl
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to send SNMP traps to the Zabbix trap receiver. The provided information does not identify any additional authentication or access requirement.
What is the impact of a successful exploit?
An attacker can inject a ZBXTRAP record that targets a different host. This can compromise the integrity of trap data associated with that host.
How can I determine whether my deployment is exposed?
Check whether your environment uses the shipped zabbix_trap_receiver.pl Perl script to receive SNMP traps and whether untrusted parties can send traps to it. The issue concerns trap content containing the ZBXTRAP record delimiter.