CVE-2026-23934

Frontend DoS via the validate.api.exists action PUBLISHED

Description (CNA)

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.4.0 through 7.4.11

CWE

CWE-405

References

https://support.zabbix.com/browse/ZBX-28072

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.