medium4.9
CVE-2026-23938
An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading t…
Impact
An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | from 6.0.0 before 6.0.47 from 7.0.0 before 7.0.27 from 7.4.0 before 7.4.11 |