Vulnerability Details CVE-2026-23930
An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 6.7%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2026-23930
-
cpe:2.3:a:zabbix:zabbix:6.0.0
-
cpe:2.3:a:zabbix:zabbix:6.0.1
-
cpe:2.3:a:zabbix:zabbix:6.0.10
-
cpe:2.3:a:zabbix:zabbix:6.0.11
-
cpe:2.3:a:zabbix:zabbix:6.0.12
-
cpe:2.3:a:zabbix:zabbix:6.0.13
-
cpe:2.3:a:zabbix:zabbix:6.0.14
-
cpe:2.3:a:zabbix:zabbix:6.0.15
-
cpe:2.3:a:zabbix:zabbix:6.0.16
-
cpe:2.3:a:zabbix:zabbix:6.0.17
-
cpe:2.3:a:zabbix:zabbix:6.0.18
-
cpe:2.3:a:zabbix:zabbix:6.0.19
-
cpe:2.3:a:zabbix:zabbix:6.0.2
-
cpe:2.3:a:zabbix:zabbix:6.0.20
-
cpe:2.3:a:zabbix:zabbix:6.0.21
-
cpe:2.3:a:zabbix:zabbix:6.0.22
-
cpe:2.3:a:zabbix:zabbix:6.0.23
-
cpe:2.3:a:zabbix:zabbix:6.0.24
-
cpe:2.3:a:zabbix:zabbix:6.0.25
-
cpe:2.3:a:zabbix:zabbix:6.0.26
-
cpe:2.3:a:zabbix:zabbix:6.0.27
-
cpe:2.3:a:zabbix:zabbix:6.0.28
-
cpe:2.3:a:zabbix:zabbix:6.0.29
-
cpe:2.3:a:zabbix:zabbix:6.0.3
-
cpe:2.3:a:zabbix:zabbix:6.0.30
-
cpe:2.3:a:zabbix:zabbix:6.0.31
-
cpe:2.3:a:zabbix:zabbix:6.0.32
-
cpe:2.3:a:zabbix:zabbix:6.0.33
-
cpe:2.3:a:zabbix:zabbix:6.0.34
-
cpe:2.3:a:zabbix:zabbix:6.0.35
-
cpe:2.3:a:zabbix:zabbix:6.0.36
-
cpe:2.3:a:zabbix:zabbix:6.0.37
-
cpe:2.3:a:zabbix:zabbix:6.0.38
-
cpe:2.3:a:zabbix:zabbix:6.0.39
-
cpe:2.3:a:zabbix:zabbix:6.0.4
-
cpe:2.3:a:zabbix:zabbix:6.0.40
-
cpe:2.3:a:zabbix:zabbix:6.0.41
-
cpe:2.3:a:zabbix:zabbix:6.0.42
-
cpe:2.3:a:zabbix:zabbix:6.0.43
-
cpe:2.3:a:zabbix:zabbix:6.0.44
-
cpe:2.3:a:zabbix:zabbix:6.0.45
-
cpe:2.3:a:zabbix:zabbix:6.0.46
-
cpe:2.3:a:zabbix:zabbix:6.0.5
-
cpe:2.3:a:zabbix:zabbix:6.0.6
-
cpe:2.3:a:zabbix:zabbix:6.0.7
-
cpe:2.3:a:zabbix:zabbix:6.0.8
-
cpe:2.3:a:zabbix:zabbix:6.0.9
-
cpe:2.3:a:zabbix:zabbix:7.0.0
-
cpe:2.3:a:zabbix:zabbix:7.0.1
-
cpe:2.3:a:zabbix:zabbix:7.0.10
-
cpe:2.3:a:zabbix:zabbix:7.0.11
-
cpe:2.3:a:zabbix:zabbix:7.0.12
-
cpe:2.3:a:zabbix:zabbix:7.0.13
-
cpe:2.3:a:zabbix:zabbix:7.0.14
-
cpe:2.3:a:zabbix:zabbix:7.0.15
-
cpe:2.3:a:zabbix:zabbix:7.0.16
-
cpe:2.3:a:zabbix:zabbix:7.0.17
-
cpe:2.3:a:zabbix:zabbix:7.0.18
-
cpe:2.3:a:zabbix:zabbix:7.0.19
-
cpe:2.3:a:zabbix:zabbix:7.0.2
-
cpe:2.3:a:zabbix:zabbix:7.0.20
-
cpe:2.3:a:zabbix:zabbix:7.0.21
-
cpe:2.3:a:zabbix:zabbix:7.0.22
-
cpe:2.3:a:zabbix:zabbix:7.0.23
-
cpe:2.3:a:zabbix:zabbix:7.0.24
-
cpe:2.3:a:zabbix:zabbix:7.0.25
-
cpe:2.3:a:zabbix:zabbix:7.0.26
-
cpe:2.3:a:zabbix:zabbix:7.0.3
-
cpe:2.3:a:zabbix:zabbix:7.0.4
-
cpe:2.3:a:zabbix:zabbix:7.0.5
-
cpe:2.3:a:zabbix:zabbix:7.0.6
-
cpe:2.3:a:zabbix:zabbix:7.0.7
-
cpe:2.3:a:zabbix:zabbix:7.0.8
-
cpe:2.3:a:zabbix:zabbix:7.0.9
-
cpe:2.3:a:zabbix:zabbix:7.4.0
-
cpe:2.3:a:zabbix:zabbix:7.4.1
-
cpe:2.3:a:zabbix:zabbix:7.4.10
-
cpe:2.3:a:zabbix:zabbix:7.4.2
-
cpe:2.3:a:zabbix:zabbix:7.4.3
-
cpe:2.3:a:zabbix:zabbix:7.4.4
-
cpe:2.3:a:zabbix:zabbix:7.4.5
-
cpe:2.3:a:zabbix:zabbix:7.4.6
-
cpe:2.3:a:zabbix:zabbix:7.4.7
-
cpe:2.3:a:zabbix:zabbix:7.4.8
-
cpe:2.3:a:zabbix:zabbix:7.4.9