CVE Catalog
CVE-2026-23938
LowCVSS 2.1Summary
An authenticated administrator can crash Zabbix server or proxy by creating specially crafted preprocessing/script item JavaScript scripts, leading to denial of service.
Risk Assessment
An attacker with administrator privileges can cause unavailability of the Zabbix server or proxy, disrupting infrastructure monitoring.
Recommendation
Restrict administrator privileges, monitor administrator activities, and apply Zabbix security updates.
Original NVD description (English source)
An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service.