(When Zabbix Agent was installed on Windows into a custom installation ...) (CVE-2026-59781)

CVE-2026-59781 is a vulnerability in the Zabbix Agent on Windows platforms when installed via a custom installation process. The CVSS 4.0 vector indicates that the attack requires local access with low complexity and privileges, and partial user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level. The affected versions include numerous Ubuntu package versions ranging from 1:2.0.6+dfsg-1ubuntu2 through 1:7.0.22+dfsg-1. There is no vendor advisory or patch information provided, and no known exploits have been reported.

The vulnerability can lead to significant compromise of confidentiality, integrity, and availability of the affected system due to the high impact ratings in these areas. However, exploitation requires local access with low privileges and some user interaction, which limits the attack surface. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, avoid installing the Zabbix Agent on Windows using custom installation methods or restrict local access and user interactions that could trigger exploitation.