CVE-2026-23938 — Server DoS via JavaScript preprocessing or script items

CVE-2026-23938

Server DoS via JavaScript preprocessing or script items PUBLISHED

Description (CNA)

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 6.0.0 through 6.0.46; affected 7.0.0 through 7.0.26; affected 7.4.0 through 7.4.10

CWE

CWE-248

References

https://support.zabbix.com/browse/ZBX-28075

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.