Bug 2545867 (CVE-2026-59787)

Summary: CVE-2026-59787 zabbix: zabbix: Trap record injection via unsanitized delimiter in SNMP trap receiver
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Zabbix. The Perl Simple Network Management Protocol (SNMP) trap receiver script does not properly sanitize the record delimiter within incoming trap content. An attacker capable of sending SNMP traps can exploit this vulnerability to inject forged trap records targeting other monitored hosts, leading to unauthorized data modification and a loss of monitoring data integrity.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2545892, 2545893, 2545895    
Bug Blocks:    

Description OSIDB Bzimport 2026-10-05 10:45:53 UTC 
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity.