Zabbix: An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the… (CVE-2026-23930)

This vulnerability allows an unauthenticated attacker to cause excessive CPU consumption on the Zabbix frontend webserver by sending crafted requests to the popup.testtriggerexpr action. The resulting high CPU load can degrade service availability, potentially causing denial of service. The issue affects numerous specific Zabbix versions as enumerated, including various Ubuntu package versions. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported, and no patch or remediation details are provided in the input data.

The impact is a potential denial of service due to disproportionate CPU load on the Zabbix frontend webserver. There is no impact on confidentiality or integrity. The vulnerability can be exploited without authentication, increasing risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor channels for updates. Until a fix is available, consider restricting access to the affected frontend action or implementing rate limiting if possible to mitigate CPU load.