Lucene search
+L

8 matches found

osv_cve
osv_cve
•added 2026/08/18 1:17 p.m.•10 views

CVE-2026-23938

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

4.9CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/18 12:20 p.m.•169 views

CVE-2026-23938 Server DoS via JavaScript preprocessing or script items

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

2.1CVSS0.00352EPSS
SaveExploits0References1
Mend
Mend
•added 2026/08/18 12:20 p.m.•10 views

CVE-2026-23938

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service...

4.9CVSS5.8AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/18 12:19 p.m.•69 views

CVE-2026-23935

A use-after-free read vulnerability exists in Zabbix's script item/preprocessing (JavaScript) HttpRequest body logic, allowing a privileged (PR:H) administrator on an adjacent network (AV:A) to read out-of-bounds memory, causing high confidentiality impact (VC:H). CVSS 4.0 base score 6.8 (MEDIUM)...

6.8CVSS5.8AI score0.00337EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/18 12:19 p.m.•15 views

CVE-2026-23935 Use-after-free read in script item/preprocessing HttpRequest body

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...

6.8CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•35 views

PT-2026-76963

Name of the Vulnerable Software and Affected Versions Zabbix server or proxy affected versions not specified Description An authenticated administrator can cause a denial of service by creating specifically crafted JavaScript scripts within preprocessing or script items, which results in the cras...

4.9CVSS5.7AI score0.00352EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•7 views

CVE-2026-23935: Out-of-bounds Read

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...

6.8CVSS5.8AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•44 views

PT-2026-76961

Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description A flaw in the script item or preprocessing JavaScript HttpRequest logic allows a Zabbix administrator to read out-of-bounds memory, which may result in a loss of confidentiality. Recommendatio...

6.8CVSS5.7AI score0.00337EPSS
SaveExploits0References11
Rows per page
Query Builder