CVE Catalog
CVE-2026-23935
MediumCVSS 6.8Summary
A Zabbix administrator can read out-of-bounds memory by exploiting a flaw in the HttpRequest logic of script items/preprocessing (JavaScript), leading to potential confidentiality loss.
Risk Assessment
Risk of sensitive data leakage from system memory, potentially compromising confidentiality of information stored in Zabbix.
Recommendation
Apply patches provided by Zabbix vendor and restrict administrator privileges to the necessary minimum.
Original NVD description (English source)
A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.