CVE-2026-59781
Received Received - Intake

DLL Sideloading Risk in Zabbix Agent Windows Installer

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Zabbix

Description
When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could later be loaded by the application, resulting in DLL sideloading. The installer has been hardened to detect potentially unsafe installation directories and now requires explicit user confirmation before proceeding with installation in such locations. This reduces the risk of accidental installation into directories with inappropriate permissions while preserving compatibility with existing deployment scenarios.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-59781
EUVD
EUVD-2026-60742

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zabbix zabbix_agent *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Zabbix Agent on Windows. When installed in a custom directory, the installer did not check if the directory had secure permissions. If unauthorized users could modify the directory, an attacker could place a malicious DLL. This DLL could later be loaded by the application, leading to DLL sideloading attacks.

Detection Guidance

This vulnerability specifically relates to Zabbix Agent installations on Windows where the installer did not verify secure permissions on custom directories. Detection involves checking for Zabbix Agent installations in directories with weak permissions or suspicious DLL files. Review installed programs and directory permissions for Zabbix Agent.

Impact Analysis

An attacker could exploit this to run malicious code on your system. This could lead to unauthorized access, data theft, or further compromise of your system. The impact depends on the privileges of the Zabbix Agent service.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized code execution through DLL sideloading. If exploited, it may lead to unauthorized access to sensitive data, violating confidentiality requirements under these regulations.

Mitigation Strategies

Ensure Zabbix Agent is installed in a secure directory with restricted permissions. Verify the installer version has been updated to enforce permission checks. Remove or restrict access to any custom installation directories that may have unsafe permissions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59781. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart