CVE-2026-23938
Description
A flaw was found in Zabbix. An authenticated administrator can exploit this vulnerability by creating specially crafted JavaScript scripts within preprocessing or script items. This can lead to a denial of service (DoS) by crashing the Zabbix server or proxy.
Statement
Zabbix is not shipped in any Red Hat product. This flaw affects community packages in Fedora and EPEL only.
Mitigation
Restrict administrative access to trusted users only. Review and audit JavaScript preprocessing and script items configured on the Zabbix server.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
