Zabbix CVE-2026-23935

Q: What is the CVSS score of CVE-2026-23935?

CVE-2026-23935 has a CVSS 4.0 base score of 6.8 (Medium). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-60739 MEDIUM

Out-of-bounds Read (CWE-125)

2026-08-18 Zabbix

GHSA-37pv-569q-qx93

Buffer Overflow Information Disclosure Zabbix

6.8

CVSS 4.0 · Vendor: Zabbix

Severity by source

Vendor (Zabbix) PRIMARY

6.8 MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.5 MEDIUM

Adjacent vector and high privileges confirmed by CVSS 4.0 input; scope unchanged and no integrity or availability impact per description.

3.1 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SUSE

5.7 MEDIUM

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (Zabbix).

CVSS VectorVendor: Zabbix

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 18, 2026 - 13:11 vuln.today

CVE Published

Aug 18, 2026 - 12:19 cve.org

MEDIUM 6.8

DescriptionCVE.org

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss.

AnalysisAI

Out-of-bounds memory read in Zabbix's script item and preprocessing JavaScript HttpRequest logic allows an authenticated administrator, operating from an adjacent network position, to read process memory beyond allocated buffer boundaries. Exploitation results in confidentiality loss - sensitive data resident in process memory may be exposed to the attacker. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Zabbix administrator account - the CVSS PR:H metric confirms this. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 score of 6.8 (Medium) reflects a constrained real-world attack surface: PR:H mandates full Zabbix administrator credentials, and AV:A limits the attacker to an adjacent network segment - both are significant barriers. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Consult the Zabbix vendor advisory at https://support.zabbix.com/browse/ZBX-28073 for patched release versions; no exact fix version is confirmed in the currently available data, so a vendor-released patch version cannot be cited here. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Zabbix

View all

CVE-2016-10134 CRITICAL Emergency POC

9.8 Feb 17

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQ

CVE-2017-2824 HIGH Act Now POC

8.1 May 24

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. Rated hi

CVE-2016-4338 HIGH Act Now POC

8.1 Jan 23

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

CVE-2022-43516 CRITICAL Act Now POC

9.8 Dec 05

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in

CVE-2022-43515 CRITICAL Act Now POC

9.8 Dec 05

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addre

CVE-2022-26148 CRITICAL Act Now POC

9.8 Mar 21

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. Rated critical severity (CVSS 9.8), this

CVE-2019-17382 CRITICAL Act Now POC

9.1 Oct 09

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. Rated critical severity

CVE-2024-22120 HIGH This Week POC

8.8 May 17

Zabbix server can perform command execution for configured scripts. Rated high severity (CVSS 8.8), this vulnerability i

CVE-2012-3435 HIGH This Week POC

7.5 Aug 15

SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, a

CVE-2013-6824 HIGH This Week POC

7.5 Dec 19

Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execu

CVE-2023-32728 CRITICAL Act Now

9.8 Dec 18

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resul

CVE-2023-29453 CRITICAL Act Now

9.8 Oct 12

Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Ra

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

7.5

CVE-2016-5198 HIGH POC

8.8

CVE-2025-5777 CRITICAL POC

9.3

CVE-2016-1646 HIGH POC

8.8

CVE-2017-5030 HIGH POC

8.8

CVE-2016-4523 HIGH

7.5

CVE-2024-48456 HIGH POC

7.5

CVE-2024-48457 HIGH POC

7.5

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise High Performance Computing 12 SP5	Not-Affected
SUSE Linux Enterprise Server 12 SP5	Not-Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	Not-Affected
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Not-Affected
SUSE Linux Enterprise High Performance Computing 12 SP3	Not-Affected

CVE-2026-23935 vulnerability details – vuln.today

Back

SUSE Linux Enterprise High Performance Computing 12 SP4	Not-Affected
SUSE Linux Enterprise Server 12 SP3-BCL	Not-Affected
SUSE Linux Enterprise Server 12 SP3-ESPOS	Not-Affected
SUSE Linux Enterprise Server 12 SP3-LTSS	Not-Affected
SUSE Linux Enterprise Server 12 SP4	Not-Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS	Not-Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	Not-Affected
SUSE OpenStack Cloud 8	Not-Affected
SUSE OpenStack Cloud 9	Not-Affected
SUSE OpenStack Cloud Crowbar 8	Not-Affected
SUSE OpenStack Cloud Crowbar 9	Not-Affected

Zabbix CVE-2026-23935

Severity by source

CVSS VectorVendor: Zabbix

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

More in Zabbix

Same weakness CWE-125 – Out-of-bounds Read

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code