CVE-2026-23935 — Use-after-free read in script item/preprocessing HttpRequest body
A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality…
Published: 2026-08-18 · CVSS: 6.8 · CVSS 4.0
A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7