Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-23938

Server DoS via JavaScript preprocessing or script items

Description

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unknown

  • 6.0.0 to ≤ 6.0.46affected
  • 7.0.0 to ≤ 7.0.26affected
  • 7.4.0 to ≤ 7.4.10affected

References