CVE Catalog
CVE-2026-23930
MediumCVSS 5.3Summary
An unauthenticated user can cause disproportionate CPU load on the Frontend webserver by sending specially crafted requests to the popup.testtriggerexpr action, leading to potential denial of service.
Risk Assessment
The attack can overload the frontend server, causing unavailability of services for all users, even without authentication.
Recommendation
Apply vendor patches and consider restricting access to the popup.testtriggerexpr action for unauthenticated users.
Original NVD description (English source)
An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.