CVE-2026-23927CWE-522

CVE-2026-23927

Medium · published May 6, 2026

CVSS v3.1

6.5

EPSS

Percentile

12.1

In the wild

Unconfirmed

What it is

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00222 · 12.1th percentile
Weakness: CWE-522 · Insufficiently Protected Credentials
Published: 2026-05-06T12:16Z

Affected products (3)

Product	Versions	Fixed in
zabbix/zabbix	≥ 6.0.0, < 6.0.45	6.0.45
zabbix/zabbix	≥ 7.0.0, < 7.0.24	7.0.24
zabbix/zabbix	≥ 7.4.0, < 7.4.8	7.4.8

References (1)

https://support.zabbix.com/browse/ZBX-27759 · [email protected]

EPSS history

Timeline

06 MAY 06:59Z
Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter
cvelistv5