CVE-2026-23933
Description
A flaw was found in Zabbix. The cryptographic key used for signing Frontend sessions was erroneously written to the database seed. In deployments that utilize both SAML authentication and guest users, an attacker could use this key to forge valid session cookies. This could potentially lead to unauthorized access to the system.
Statement
This vulnerability is rated as Important because unauthenticated attackers can forge valid session tokens to gain unauthorized access to the frontend. The issue is classified at this severity because successful exploitation enables complete compromise of session integrity and access to sensitive monitoring data, though it requires specific non-default prerequisites where both SAML authentication and guest user access are concurrently enabled. Furthermore, Zabbix is not shipped in Red Hat Enterprise Linux, limiting exposure to community distributions such as Fedora.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
