CVE-2026-59782

UNKNOWN

Description

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.

Timeline

Published:October 5th, 2026 11:16 AM

Last modified:October 5th, 2026 12:17 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-125

References & Reports

Advisories, patches, and third-party reports

https://support.zabbix.com/browse/ZBX-28193

Source: NIST NVD · Data may lag official sources by up to one minute