CVE-2026-59787 SNMP trap injection in zabbix_trap_receiver.pl
Attackers can inject SNMP trap records targeting other hosts via the Zabbix Perl trap receiver, compromising data integrity.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-59787?
CVE-2026-59787 is a medium-severity vulnerability in Zabbix, published on 5 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.
Weakness: CWE-143
Which versions are affected by CVE-2026-59787?
How do I fix CVE-2026-59787?
Apply the vendor's patch.
Is CVE-2026-59787 being exploited?
There is no known exploitation of CVE-2026-59787 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-59787, GHSA-3p5c-5fm7-qp72, UBUNTU-CVE-2026-59787.