CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

net-mgmt/zabbix74-server 7.4.16

Enterprise-class open source distributed monitoring (server)

0
unaddressed
0
VuXML only
10
fixed
0
open problem reports

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: 7.4.16
Upstream
up to date
Last update
to 7.4.16 · cbed917c17
Quarterly
2026Q4: 7.4.15
WWW
https://www.zabbix.com/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install zabbix74-server
installs 7.4.16 from latest; from quarterly (2026Q4) 7.4.15
Port
# cd /usr/ports/net-mgmt/zabbix74-server && make install clean
# make -C /usr/ports/net-mgmt/zabbix74-server config  # change options first
Size
7.6 MiB download · 57 MiB installed
Depends on
databases/mysql84-client 8.4.11_1, databases/unixODBC 2.3.12_2, devel/libevent 2.1.13, devel/pcre2 10.49, ftp/curl 8.23.0, net-mgmt/net-snmp 5.9.5.2,1, net/fping 5.5, security/libssh2 1.11.1_1,3, sysutils/openipmi 2.0.29_1, textproc/libxml2 2.15.4
License
AGPLv3
Creates
user zabbix, group zabbix
Options
10 of 19 on in the package: CURL FPING IPMI IPV6 MYSQLDV OPENSSL PCRE2 SNMP SSH UNIXODBC
Show the 9 options that are off
GNUTLS LDAP MDB1011 MDB114 MDB118 MDB123 MYSQL NMAP PGSQL
pkg-message
Shown after installing
This is a Zabbix Standard release!

Standard Zabbix releases are supported for Zabbix customers during six (6)
months of Full Support (general, critical and security issues) until the next
Zabbix stable release, plus one (1) additional month of Limited Support
(critical and security issues only). Zabbix Standard version release will result
in change of the second version number.

Standard release:       Zabbix 7.4
Release date:           Jul 01, 2025
End of Full Support:    Until 8.0 LTS
End of Limited Support: Q3 2026

Zabbix Life Cycle & Release Policy:
https://www.zabbix.com/life_cycle_and_release_policy

Log files are now under /var/log/zabbix directory instead of /tmp as it was
previously.

For Zabbix server and proxy daemons, as well as Zabbix frontend, a database is
required. It is not needed to run Zabbix agent.

To populate the database with initial data:

% cd /usr/local/share/zabbix74/server/database

and follow the instructions:
https://www.zabbix.com/documentation/7.4/en/manual/appendix/install/db_scripts

Upgrade notes for 7.4:
https://www.zabbix.com/documentation/7.4/en/manual/installation/upgrade_notes_740

Upgrade procedure:
https://www.zabbix.com/documentation/current/en/manual/installation/upgrade/sources

Official Zabbix documentation:
https://www.zabbix.com/documentation/7.4/en/manual

Please see https://www.zabbix.com/ for detailed information about Zabbix.

The default credentials for zabbix frontend is:
  Username: Admin
  Password: zabbix

For use NMAP please edit sudoers.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 167.4.167.4.15–
FreeBSD 157.4.167.4.15–
FreeBSD 147.4.157.4.15✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 157.4.157.4.15–
FreeBSD 147.4.157.4.15✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 7.4.16.

Fixed (10)

Show 10 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-239298.52026-08-18Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like …
CVE-2026-239337.72026-08-18In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario …
CVE-2026-11996.92026-08-18Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultane…
CVE-2026-239356.82026-08-18A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confide…
CVE-2026-239376.02026-08-18The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
CVE-2026-239305.32026-08-18An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerex…
CVE-2026-239315.32026-08-18The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.
CVE-2026-239345.12026-08-18An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists a…
CVE-2026-239382.12026-08-18An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potentia…
CVE-2026-239222.12026-08-18The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to rese…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (25)

Juraj Lutter (otis) · 7.4.16
net-mgmt/zabbix74-server: Update to 7.4.16

Release notes:		https://www.zabbix.com/rn/rn7.4.16
cbed917c17
Juraj Lutter (otis) · 7.4.15
net-mgmt/zabbix74-server: Update to 7.4.15

Release notes:		https://www.zabbix.com/rn/rn7.4.15
9a150319ce
Juraj Lutter (otis) · 7.4.14
net-mgmt/zabbix74-proxy: Fix rc.d script

After chasing MariaDB-related changes, proxy rc.d script was missed out.

Fixes:		6ca0412c95f17
8157897c59
Juraj Lutter (otis) · 7.4.14
net-mgmt/zabbix74-server: Fix build with MariaDB

Synchronize with all supported MariaDB versions.

PR:		298091
6ca0412c95
Juraj Lutter (otis) · 7.4.14
net-mgmt/zabbix74-server: Update to 7.4.14

Release notes:	https://www.zabbix.com/rn/rn7.4.14
78d247f375
Xavier Beaudouin (kiwi) · 7.4.13_1
et-mgmt/zabbix74-server:  fix mariadb dependencies

Since database/mariadb105-server and databases/mariadb106-server
are now removed from ports, zabbix74-server cannot be built with
mariadb as database.
This fix this issue and add all mariadb versions supported by
Mk/Uses/mysql.mk

PR:	297242
Approved by:	maintainer timeout (otis)
Sponsored by:	NBER
Sponsored by:	Klara, Inc.
fadbec3d87
Juraj Lutter (otis) · 7.4.13
net-mgmt/zabbix74-server: Update to 7.4.13

Release notes:	https://www.zabbix.com/rn/rn7.4.13
7c2c58099a
Juraj Lutter (otis) · 7.4.12
net-mgmt/zabbix74-server: Update to 7.4.12

Release notes:	https://www.zabbix.com/rn/rn7.4.12
8fda82d533
Juraj Lutter (otis) · 7.4.11
net-mgmt/zabbix74-server: Update to 7.4.11

Release notes:	https://www.zabbix.com/rn/rn7.4.11
0bab0e8be1
Juraj Lutter (otis) · 7.4.10
net-mgmt/zabbix74-server: Update to 7.4.10

Release notes:	https://www.zabbix.com/rn/rn7.4.10
a33ec8dca9
Juraj Lutter (otis) · 7.4.9
net-mgmt/zabbix74-server: Update to 7.4.9

Release notes:	https://www.zabbix.com/rn/rn7.4.9
8765d76a3f
Juraj Lutter (otis) · 7.4.8
net-mgmt/zabbix*-server: Switch to respect DEFAULT_VERSIONS for MySQL

To help tracking of default MySQL client version, switch the default MySQL
requirement from fixed version (8.0, 8.4, ...) to DEFAULT_VERSIONS.

Reported by:	Simon Wright <simon.wright@gmx.net>
bc4339d70e
Juraj Lutter (otis) · 7.4.8
net-mgmt/zabbix74-server: Update to 7.4.8

Release notes:	https://www.zabbix.com/rn/rn7.4.8
5441e1c639
Ronald Klop (ronald) · 7.4.7_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Juraj Lutter (otis) · 7.4.7
net-mgmt/zabbix74-server: Update to 7.4.7

Release notes:	https://www.zabbix.com/rn/rn7.4.7
ceba750ff8
Juraj Lutter (otis) · 7.4.6
net-mgmt/zabbix74-server: Update to 7.4.6

Release notes:	https://www.zabbix.com/rn/rn7.4.6
f782fb8aa3
Xavier Beaudouin (kiwi) · 7.4.5
*/*: Introduction USES=sudo

A new uses 'sudo' has been added to transperently depends of the
proper flavor of sudo 'default' or 'sssd' depending on the default
version set by the user.

If you prefere to use 'sssd' flavor of sudo, add the following
to your make.conf:

        DEFAULT_VERSIONS+=sudo=sssd

All sudo consummer ports has benn updated to USES=sudo

Reviewed by:    0mp
Approved by:    mat
Sponsored by:   Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D52160
ee5c766cba
Juraj Lutter (otis) · 7.4.5
net-mgmt/zabbix74-server: Update to 7.4.5

Release notes:	https://www.zabbix.com/rn/rn7.4.5
75c9a811e8
Juraj Lutter (otis) · 7.4.4
net-mgmt/zabbix74-server: Update to 7.4.4

Release notes:	https://www.zabbix.com/rn/rn7.4.4
420dd082d3
Juraj Lutter (otis) · 7.4.3
net-mgmt/zabbix74-server: Update to 7.4.3

Release notes:	https://www.zabbix.com/rn/rn7.4.3
0440796bc9
Juraj Lutter (otis) · 7.4.2
net-mgmt/zabbix74-server: Update to 7.4.2

Release notes:	https://www.zabbix.com/rn/rn7.4.2
fd2225f250
Juraj Lutter (otis) · 7.4.1_1
net-mgmt/zabbix74-server: Fix agent build

Fix a typo OPTOINS_DEFINE -> OPTIONS_DEFINE for PCRE2 option
that prevented the agent from building.
3052469f56
Juraj Lutter (otis) · 7.4.1_1
net-mgmt/zabbix74-server: Drop PCRE1 support

- Drop PCRE1 support (only PCRE2 is supported by upstream)
- Adjust PORTSCOUT

PR:		288203
6f2c31f71a
Juraj Lutter (otis) · 7.4.1
net-mgmt/zabbix74-server: Update to 7.4.1

- Update to 7.4.1
- Adjust LICENSE, Zabbix is now under AGPLv3 (was GPLv2 before)
729e1fb914
Juraj Lutter (otis) · 7.4.0
net-mgmt/zabbix74: Add new ports

Add zabbix74 ports, a Standard release. Its support will last
until there will be 8.0 LTS release (at the latest in Q3/2026).

The upgrade notes can be found at:
https://www.zabbix.com/documentation/7.4/en/manual/installation/upgrade_notes_740

Release notes:	https://www.zabbix.com/rn/rn7.4.0
a669ab74cd