CVE-2026-23929

A flaw was found in Zabbix. This prototype pollution vulnerability, specifically within the searchParamsToObject function, allows an attacker to inject malicious data into web pages. By manipulating URL parameters that are not properly filtered, an attacker can achieve persistent Cross-Site...

Linux Distros Unpatched Vulnerability : CVE-2026-23929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous propertie...

DEBIAN-CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

UBUNTU-CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

EUVD-2026-60734

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

CVE-2026-23929

Zabbix's searchParamsToObject() function failed to filter dangerous properties like __proto__ from URL parameters, enabling prototype pollution that, combined with jQuery's unsafe element creation traversing the prototype chain, results in persistent XSS in Maps. CVSS 4.0 scores this HIGH (8.5) w...

CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

CVE-2026-23929: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...

PT-2026-76956

Name of the Vulnerable Software and Affected Versions Maps affected versions not specified Description A prototype pollution issue exists in the searchParamsToObject function. The processing of URL parameters fails to filter dangerous properties such as proto . When combined with unsafe element...