CVE-2026-23935

Use-after-free read in script item/preprocessing HttpRequest body PUBLISHED

Description (CNA)

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 7.0.0 through 7.0.27; affected 7.4.0 through 7.4.11

CWE

CWE-125

References

https://support.zabbix.com/browse/ZBX-28073

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.