CVE-2026-23935

Vulnerability Description

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.

Related Weaknesses (CWE)

CWE-125

References

https://support.zabbix.com/browse/ZBX-28073

FAQ

What is CVE-2026-23935?

CVE-2026-23935 is a documented vulnerability. A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.

How severe is CVE-2026-23935?

CVSS scoring is not yet available for CVE-2026-23935. Check NVD for updates.

Is there a patch for CVE-2026-23935?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.