CVE-2025-27237CWE-427
CVE-2025-27237
published October 3, 2025
What it is
In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.
The record
Technical detail
- CVSS
- 7.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00333 · 25.5th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2025-10-03T16:15Z
References (1)
EPSS history
Timeline