CVE-2026-23938 Server DoS via JavaScript preprocessing or script items

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

CVE-2026-23938

Zabbix server/proxy is affected: an authenticated administrator can create specifically crafted JavaScript scripts in preprocessing/script items, causing a crash and denial of service . CVSS 4.0 rates this LOW (2.1) due to high privileges required and availability-only impact. Exploitation detail...