---
cve: "CVE-2026-23930"
severity: "MEDIUM"
cvss: 5.3
epss: "17%"
vendor: "Zabbix"
kev: false
exploited: false
published: "2026-08-18 13:17:21"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-13T01:50:26+02:00"
---

# CVE-2026-23930

> 5.3 MEDIUM

## Beschreibung

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.

## CVSS-Vektor

```
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Benachbart | warn |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Patch verfügbar (OSV)

- 39db3e7dce42aca1f772888804eb3280627347f0 (Commit)
- e4b2990bfed4d08d711394444097a5ff4772466d (Commit)

## Referenzen

- <https://support.zabbix.com/browse/ZBX-28069>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-23930) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_