CVE-2026-23931

Frontend plaintext macro value enumeration via the validatate.api.exists action PUBLISHED

Description (CNA)

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.4.0 through 7.4.10

CWE

CWE-203

References

https://support.zabbix.com/browse/ZBX-28070

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.