Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 26.8%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-23934
  • Zabbix » Zabbix » Version: 7.4.0
    cpe:2.3:a:zabbix:zabbix:7.4.0
  • Zabbix » Zabbix » Version: 7.4.1
    cpe:2.3:a:zabbix:zabbix:7.4.1
  • Zabbix » Zabbix » Version: 7.4.10
    cpe:2.3:a:zabbix:zabbix:7.4.10
  • Zabbix » Zabbix » Version: 7.4.11
    cpe:2.3:a:zabbix:zabbix:7.4.11
  • Zabbix » Zabbix » Version: 7.4.2
    cpe:2.3:a:zabbix:zabbix:7.4.2
  • Zabbix » Zabbix » Version: 7.4.3
    cpe:2.3:a:zabbix:zabbix:7.4.3
  • Zabbix » Zabbix » Version: 7.4.4
    cpe:2.3:a:zabbix:zabbix:7.4.4
  • Zabbix » Zabbix » Version: 7.4.5
    cpe:2.3:a:zabbix:zabbix:7.4.5
  • Zabbix » Zabbix » Version: 7.4.6
    cpe:2.3:a:zabbix:zabbix:7.4.6
  • Zabbix » Zabbix » Version: 7.4.7
    cpe:2.3:a:zabbix:zabbix:7.4.7
  • Zabbix » Zabbix » Version: 7.4.8
    cpe:2.3:a:zabbix:zabbix:7.4.8
  • Zabbix » Zabbix » Version: 7.4.9
    cpe:2.3:a:zabbix:zabbix:7.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved