4 matches found
CVE-2026-23931
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality...
CVE-2026-23931
Zabbix's frontend validate.api.exists action allows authenticated users to extract plaintext user macro values, exposing sensitive configuration data (CVSS 5.3, Medium). The Nessus scanner confirms no vendor-supplied patch is available for affected Linux/Unix packages; users should monitor Zabbix...
EUVD-2026-60736
The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality...
PT-2026-76958
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Authenticated users can exploit the validatate.api.exists action to extract plaintext user macro values, which may result in a loss of confidentiality...