Vulnerability in Zabbix

CVE-2026-23931

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.

Affected products

Weakness classification (CWE)

References