Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-06 | 1 | Disclosure1 |
| 2026-05-11 | 1 | General1 |
| 2026-05-31 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Zabbix ❗ CVE-2026-23928 ❗ CVE-2026-23926 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-zabbix-2/ https://t.co/hmJvPi9Vw7
Post summary
The tweet announces two CVEs related to Zabbix products and links to external resources for more information, but provides no additional technical, exploit, or patch details.
★ 【緊急】26年5月公開のZabbix の脆弱性情報 ★ 弊社ブログ<TechHarmony>を更新しました。Zabbix6.0.44、7.0.23、7.4.7までのバージョンに影響する脆弱性(CVE-2026-23926 ~ CVE-2026-23928)に関する情報です。https://blog.usize-tech.com/zabbix-vulnerabilities-202605/ #SCSK #Zabbix
Post summary
The post announces the discovery of CVE‑2026‑23926 through CVE‑2026‑23928 vulnerabilities affecting Zabbix 6.0.44, 7.0.23, and 7.4.7 and directs readers to a company blog for further details.
CVE-2026-23928 Cross-Site Scripting in Zabbix Item History and Plain Text Widgets https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23928
Post summary
The text announces CVE‑2026‑23928 as a cross‑site scripting flaw in Zabbix’s Item History and Plain Text Widgets, linking to a database entry for more details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zabbix | zabbix | - | - | - |