CVEvulnerability

CVE-2026-23934

5.1 MEDIUM Published 2026-08-18 Modified 2026-09-23 Official page ↗
Status
Analyzed
Published
2026-08-18
Last modified
2026-09-23
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.1 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-405

Description

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.

Affected configurations

• zabbix zabbix (>= 7.4.0 < 7.4.12)

Related

Weakness · CWE (1)

  • CWE-405 Asymmetric Resource Consumption (Amplification) weakness

References