CVE-2025-27236

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description A regular user can search for other users within their user group through the Zabbix API and access fields they are not authorized to view. This enables the extraction of data from fields the user normally lacks access to. The issue involves the ability to query user information via the API, potentially revealing sensitive details.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.