What is CVE-2026-23938?
CVE-2026-23938 allows an authenticated administrator in Zabbix to crash the server or proxy by crafting specific JavaScript preprocessing scripts, leading to a denial of service. Users should update Zabbix to the latest patched version.
Azərbaycanca: CVE-2026-23938 Zabbix monitorinq sistemində autentifikasiya olunmuş administratora server və ya proxy komponentini çökdürməyə imkan verən boşluqdur. Xüsusi hazırlanmış JavaScript skriptləri vasitəsilə denial of service (DoS) yaranır. Zabbix-i ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: shared vendor: Zabbix
FAQ2
What privilege level is required to exploit CVE-2026-23938?
Exploiting the vulnerability requires authenticated administrator privileges in Zabbix.
What is the impact of CVE-2026-23938?
It can cause the server or proxy component to crash, leading to a denial of service (DoS), through crafted JavaScript preprocessing scripts.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.