{"id":"CVE-2026-59785","published":"2026-10-05T11:16:59.667","lastModified":"2026-10-06T15:27:05.657","description":"Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from the search result whether the guess was right, letting them uncover it.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-204"],"vendors":[],"products":[],"references":[{"url":"https://support.zabbix.com/browse/ZBX-28195","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}