CVEvulnerability

CVE-2026-23930

5.3 MEDIUM Published 2026-08-18 Modified 2026-09-08 Official page ↗
Status
Analyzed
Published
2026-08-18
Last modified
2026-09-08
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-405

Description

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.

Affected configurations

• zabbix zabbix (>= 6.0.0 < 6.0.47) • zabbix zabbix (>= 7.0.0 < 7.0.27) • zabbix zabbix (>= 7.4.0 < 7.4.11)

Related

Weakness · CWE (1)

  • CWE-405 Asymmetric Resource Consumption (Amplification) weakness

References