Vulnerabilities

CVSS

8.5 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Risk score

68.0

Published

2026-08-18

Status

Published

Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.

Weaknesses

CWE-1321

Coverage 1

vulnerability

Multiples vulnérabilités dans Zabbix (18 août 2026)

Multiple vulnerabilities have been discovered in Zabbix, potentially allowing attackers to cause a denial of service, compromise data confidentiality, and damage data integrity. These vulnerabilities affect various Zabbi…

CERT-FR · Aug 18, 2026 High

CVE-2026-1199CVE-2026-23922CVE-2026-23929zabbixvulnerabilitypatch

All articles mentioning it

Advisories and references

• support.zabbix.com/browse/ZBX-28068