Bug 2545865 (CVE-2026-59782)
| Summary: | CVE-2026-59782 zabbix: Zabbix: Information disclosure via the JavaScript preprocessing engine | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Zabbix. An authenticated user with limited administrative privileges can read raw server memory by leveraging the JavaScript preprocessing engine. This flaw leads to information disclosure, exposing sensitive data from other concurrently running preprocessor tasks that should not be accessible to that user.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2545902, 2545901, 2545903 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-05 10:44:44 UTC
|