Vulnerability in Zabbix

CVE-2026-1199

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.

Vulnerability class: Race Condition

Affected products

Weakness classification (CWE)

References