Description
An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
Vendor Solution
Update the affected components to their respective fixed versions.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://support.zabbix.com/browse/ZBX-28072 |
|
History
Tue, 18 Aug 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service. | |
| Title | Frontend DoS via the validate.api.exists action | |
| Weaknesses | CWE-405 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: Zabbix
Published:
Updated: 2026-08-18T13:35:07.131Z
Reserved: 2026-01-19T14:03:13.686Z
Link: CVE-2026-23934
No data.
Status : Received
Published: 2026-08-18T13:17:21.717
Modified: 2026-08-18T13:17:21.717
Link: CVE-2026-23934
No data.
OpenCVE Enrichment
No data.
Weaknesses