CVE-2026-23923

N/A

Descricao

An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. The impact depends on environment setup but appears limited at this time.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/24/2026

Ultima modificacao3/25/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-470

Referencias

https://support.zabbix.com/browse/ZBX-27641(security@zabbix.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.