Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-23931

Frontend plaintext macro value enumeration via the validatate.api.exists action

Description

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unknown

  • 7.4.0 to ≤ 7.4.10affected

References