CVE-2026-1199 — API and Frontend login lockout race condition
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, p…
Published: 2026-08-18 · CVSS: 6.9 · CVSS 4.0
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7