CVE-2026-23938

Description

An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service.

References

• https://support.zabbix.com/browse/ZBX-28075