CVE-2026-23930 — Frontend DoS via the popup.testtriggerexpr action

CVE-2026-23930

Frontend DoS via the popup.testtriggerexpr action PUBLISHED

Description (CNA)

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 6.0.0 through 6.0.46; affected 7.0.0 through 7.0.26; affected 7.4.0 through 7.4.10

CWE

CWE-405

References

https://support.zabbix.com/browse/ZBX-28069

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.