CVE-2026-23938

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

CVE-2026-23938 Server DoS via JavaScript preprocessing or script items

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

CVE-2026-23935 Use-after-free read in script item/preprocessing HttpRequest body

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...

CVE-2026-23935

A use-after-free read vulnerability exists in Zabbix's script item/preprocessing (JavaScript) HttpRequest body logic, allowing a privileged (PR:H) administrator on an adjacent network (AV:A) to read out-of-bounds memory, causing high confidentiality impact (VC:H). CVSS 4.0 base score 6.8 (MEDIUM)...

PT-2026-76963

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

PT-2026-76961

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...