This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-23930 →

DEBIAN-CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend...

Original description

The description as published by the source.

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 zabbix

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 zabbix

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 zabbix

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.27+dfsg-1"}]}]

References

advisory security-tracker.debian.org