CVE-2026-23930
5.3
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Summary
An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Zabbix | Zabbix | 6.0.0 <= 6.0.46 | affected |
| Zabbix | Zabbix | 7.0.0 <= 7.0.26 | affected |
| Zabbix | Zabbix | 7.4.0 <= 7.4.10 | affected |
Weaknesses
- CWE-405: CWE-405: Asymmetric Resource Consumption (Amplification)
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.