CVE-2026-23938

An authenticated administrator can exploit a vulnerability in Java used by Zabbix by crafting malicious preprocessing or script item JavaScript scripts, which may result in a denial of service by crashing the Zabbix server or proxy. Organizations utilizing Zabbix for monitoring should prioritize this issue to prevent potential disruptions in service. Although the severity is rated low, the impact on availability could be significant in critical environments.