一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月5日

CVE-2026-59786 – Zabbix Server and Proxy accept the active agent heartbeat message regardless of the config

未分类
📑 文章目录

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity.