medium4.3
CVE-2026-23931
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confident…
Impact
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | from 7.4.0 before 7.4.11 |