CVE-2026-23930 is a vulnerability in Zabbix
Published on August 18, 2026
Frontend DoS via the popup.testtriggerexpr action
An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.
Vulnerability Analysis
Weakness Type
What is an Amplification Vulnerability?
Software that does not appropriately monitor or control resource consumption can lead to adverse system performance. This situation is amplified if the software allows malicious users or attackers to consume more resources than their access level permits. Exploiting such a weakness can lead to asymmetric resource consumption, aiding in amplification attacks against the system or the network.
CVE-2026-23930 has been classified to as an Amplification vulnerability or weakness.
Products Associated with CVE-2026-23930
Want to know whenever a new CVE is published for Zabbix? stack.watch will email you.
Affected Versions
Zabbix:- Version 6.0.0, <= 6.0.46 is affected.
- Version 7.0.0, <= 7.0.26 is affected.
- Version 7.4.0, <= 7.4.10 is affected.