CVE-2022-23134VulnerabilityPublished 02/22/2022Updated 10/24/2026

CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability

Affects Zabbix FrontendSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 02/22/2022
KEV deadline: 03/08/2022
EPSS: 95.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2022-23134 (opens in a new tab)

Description

CVE-2022-23134 is a high-severity vulnerability in the Zabbix Frontend that allows malicious actors to bypass step checks and potentially modify the frontend configuration. This improper access control issue has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

CVE-2022-23134 is an improper access control vulnerability in the Zabbix Frontend component. It enables attackers to bypass step checks designed to restrict access, thereby allowing unauthorized changes to the configuration of the Zabbix Frontend. The vulnerability has been observed to be exploited in the wild, indicating active threat usage. No detailed version information or patch availability is provided in the source data.

Impact

Successful exploitation allows attackers to change the configuration of the Zabbix Frontend without proper authorization. This could lead to unauthorized system modifications and potential disruption of monitoring operations. The vulnerability is confirmed to be exploited in the wild, increasing the risk to affected deployments.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Zabbix Frontend to trusted users only and monitor for suspicious activity related to configuration changes.

Weaknesses

CWE-284Improper Access Control (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:11:51 UTC

Weaknesses

References

Related threats