CVE Catalog
CVE-2026-1199
MediumCVSS 6.9Summary
The login lockout mechanism in Zabbix API and Frontend has a flaw where several unsuccessful login requests sent simultaneously are not properly counted towards the block counter, potentially allowing more password guesses than intended.
Risk Assessment
An attacker can perform brute-force attacks on passwords, increasing the chances of compromising a user account.
Recommendation
Apply vendor patches and consider additional protection mechanisms such as rate limiting on login attempts.
Original NVD description (English source)
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.