← All credits

Zabbix wants to thank kelsier from clocktwice.com for submitting this report on the HackerOne bug bounty platform.

2 vulnerability records and advisories credit this contributor.

CVE-2026-23927
Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter
CVE-2026-23924
Agent 2 Docker plugin arbitrary file read via Docker API injection