Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-23935

Use-after-free read in script item/preprocessing HttpRequest body

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unknown

  • 7.0.0 to ≤ 7.0.27affected
  • 7.4.0 to ≤ 7.4.11affected

References