CVE details
CVE-2026-23929
Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.
Matched ports (18)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| net-mgmt/zabbix6-java | zabbix6-java | 6.0.49 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix6-proxy | zabbix6-proxy | 6.0.49 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-agent | zabbix7-agent | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-frontend | zabbix7-frontend-php82 | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-frontend | zabbix7-frontend-php83 | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-frontend | zabbix7-frontend-php84 | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-frontend | zabbix7-frontend-php85 | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-frontend | zabbix7-frontend-php86 | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-proxy | zabbix7-proxy | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix7-server | zabbix7-server | 7.0.32 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-agent | zabbix74-agent | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-frontend | zabbix74-frontend-php82 | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-frontend | zabbix74-frontend-php83 | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-frontend | zabbix74-frontend-php84 | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-frontend | zabbix74-frontend-php85 | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-frontend | zabbix74-frontend-php86 | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-proxy | zabbix74-proxy | 7.4.16 | fixed by update | otis@FreeBSD.org |
| net-mgmt/zabbix74-server | zabbix74-server | 7.4.16 | fixed by update | otis@FreeBSD.org |