# CVE-2026-23930

## Summary

- **CVE ID:** CVE-2026-23930
- **Severity:** MEDIUM
- **CVSS Score:** 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-405
- **Published:** Aug 18, 2026
- **Last Modified:** Aug 18, 2026

## Description

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.

## Affected Products

- Zabbix — Zabbix (6.0.0)
- Zabbix — Zabbix (7.0.0)
- Zabbix — Zabbix (7.4.0)

## References

- [CNA](https://support.zabbix.com/browse/ZBX-28069)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.36%
- **EPSS Percentile:** 28.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._