CVE-2026-23922— Email media OAuth secret leak to Super Admin
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-23922
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Email media OAuth secret leak to Super Admin
Source: CVE Program / CVE List V5
Vulnerability Description
The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-23922
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23922
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-23922 (1)
Same Patch Batch · Zabbix · 2026-08-18 · 11 CVEs total
| CVE-2026-23929 | 8.5 HIGH | Prototype pollution leading to stored XSS |
| CVE-2026-23933 | 7.7 HIGH | Hardcoded session key in Zabbix 7.4 |
| CVE-2026-1199 | 6.9 MEDIUM | API and Frontend login lockout race condition |
| CVE-2026-23935 | 6.8 MEDIUM | Use-after-free read in script item/preprocessing HttpRequest body |
| CVE-2026-23937 | 6.0 MEDIUM | Host PSK extraction in Zabbix API |
| CVE-2026-59781 | 5.4 MEDIUM | Improper validation of custom installation directories on Windows could allow installation |
| CVE-2026-23931 | 5.3 MEDIUM | Frontend plaintext macro value enumeration via the validatate.api.exists action |
| CVE-2026-23930 | 5.3 MEDIUM | Frontend DoS via the popup.testtriggerexpr action |
| CVE-2026-23934 | 5.1 MEDIUM | Frontend DoS via the validate.api.exists action |
| CVE-2026-23938 | 2.1 LOW | Server DoS via JavaScript preprocessing or script items |
IV. Related Vulnerabilities
Same product: Zabbix
- CVE-2026-59781
Improper validation of custom installation directories on Wi - CVE-2026-23938
Server DoS via JavaScript preprocessing or script items - CVE-2026-23937
Host PSK extraction in Zabbix API - CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest - CVE-2026-23934
Frontend DoS via the validate.api.exists action
Same vendor: Zabbix
- CVE-2026-59781
Improper validation of custom installation directories on Wi - CVE-2026-23938
Server DoS via JavaScript preprocessing or script items - CVE-2026-23937
Host PSK extraction in Zabbix API - CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest - CVE-2026-23934
Frontend DoS via the validate.api.exists action
Same weakness: CWE-522
- CVE-2026-14564
Sensitive Data Exposure in Innotim Software's Logsign SIEM - CVE-2026-72857
Budibase before 3.40.0 Credential Exposure via STRING Fields - CVE-2026-0290
Prisma Browser: Sensitive Information Disclosure Vulnerabili - CVE-2026-0289
Prisma Browser: Inappropriate Implementation in Account Prot - CVE-2026-72801
SiYuan before v3.7.4 Information Disclosure via Encryption K
V. Comments for CVE-2026-23922
No comments yet