https://patchfirst.co/vendor/zabbix/New and newly exploited Zabbix CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2024-42327/CVE-2024-42327Wed, 27 Nov 2024 00:00:00 GMTZabbix · Zabbix. Not in CISA KEV. EPSS 79.1% (higher than 99.6% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. Priority 31.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-22120/CVE-2024-22120Fri, 17 May 2024 00:00:00 GMTZabbix · Zabbix. Not in CISA KEV. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 67.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-29452/CVE-2023-29452Thu, 13 Jul 2023 00:00:00 GMTZabbix · Zabbix. Not in CISA KEV. EPSS 64.1% (higher than 99.22% of CVEs). CVSS 5.5 MEDIUM. Priority 23.7 of 100.https://patchfirst.co/cve/CVE-2022-23131/CVE-2022-23131#kevTue, 22 Feb 2022 00:00:00 GMTZabbix · Frontend. In CISA KEV since 2022-02-22. ENISA EUVD lists it as exploited. EPSS 95.7% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1548 Abuse Elevation Control Mechanism; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 69.8 of 100.kevpublic-exploitT1190T1548T1059T1078https://patchfirst.co/cve/CVE-2022-23134/CVE-2022-23134#kevTue, 22 Feb 2022 00:00:00 GMTZabbix · Frontend. In CISA KEV since 2022-02-22. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction. Priority 66.7 of 100.kevpublic-exploitT1190T1485https://patchfirst.co/cve/CVE-2013-3628/CVE-2013-3628Fri, 07 Feb 2020 00:00:00 GMTZabbix · Zabbix. Not in CISA KEV. EPSS 67.5% (higher than 99.31% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploit