← All credits

Zabbix wants to thank YoKo Kho (@YoKoAcc) from PT ITSEC Asia, Tbk for submitting this report on the HackerOne bug bounty platform.

1 vulnerability record and advisories credit this contributor.

CVE-2026-23920
Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection