CVE-2026-23922 | BDVDB-2026-360784 Detail
ZabbixZabbix
Description#
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint.
Impact#
CAPEC-194: Fake the Source of Data
Weaknesses#
- CWE-522 Insufficiently Protected Credentials
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.