# CVE-2026-23934

## Summary

- **CVE ID:** CVE-2026-23934
- **Severity:** MEDIUM
- **CVSS Score:** 5.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-405
- **Published:** Aug 18, 2026
- **Last Modified:** Aug 18, 2026

## Description

An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.

## Affected Products

- Zabbix — Zabbix (7.4.0)

## References

- [CNA](https://support.zabbix.com/browse/ZBX-28072)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.17%
- **EPSS Percentile:** 6.4

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._