CVE-2026-23929— Prototype pollution leading to stored XSS
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-23929
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Prototype pollution leading to stored XSS
Source: CVE Program / CVE List V5
Vulnerability Description
Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, combined with jQuery's unsafe element creation that traversed the prototype chain.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1321
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-23929
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23929
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-23929 (1)
Same Patch Batch · Zabbix · 2026-08-18 · 11 CVEs total
| CVE-2026-23933 | 7.7 HIGH | Hardcoded session key in Zabbix 7.4 |
| CVE-2026-1199 | 6.9 MEDIUM | API and Frontend login lockout race condition |
| CVE-2026-23935 | 6.8 MEDIUM | Use-after-free read in script item/preprocessing HttpRequest body |
| CVE-2026-23937 | 6.0 MEDIUM | Host PSK extraction in Zabbix API |
| CVE-2026-59781 | 5.4 MEDIUM | Improper validation of custom installation directories on Windows could allow installation |
| CVE-2026-23931 | 5.3 MEDIUM | Frontend plaintext macro value enumeration via the validatate.api.exists action |
| CVE-2026-23930 | 5.3 MEDIUM | Frontend DoS via the popup.testtriggerexpr action |
| CVE-2026-23934 | 5.1 MEDIUM | Frontend DoS via the validate.api.exists action |
| CVE-2026-23938 | 2.1 LOW | Server DoS via JavaScript preprocessing or script items |
| CVE-2026-23922 | 2.1 LOW | Email media OAuth secret leak to Super Admin |
IV. Related Vulnerabilities
Same product: Zabbix
- CVE-2026-59781
Improper validation of custom installation directories on Wi - CVE-2026-23938
Server DoS via JavaScript preprocessing or script items - CVE-2026-23937
Host PSK extraction in Zabbix API - CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest - CVE-2026-23934
Frontend DoS via the validate.api.exists action
Same vendor: Zabbix
- CVE-2026-59781
Improper validation of custom installation directories on Wi - CVE-2026-23938
Server DoS via JavaScript preprocessing or script items - CVE-2026-23937
Host PSK extraction in Zabbix API - CVE-2026-23935
Use-after-free read in script item/preprocessing HttpRequest - CVE-2026-23934
Frontend DoS via the validate.api.exists action
Same weakness: CWE-1321
- CVE-2026-71553
ApostropheCMS: 2nd-order prototype pollution via PATCH leadi - CVE-2026-73654
Trigger.dev: Prototype pollution via run metadata operations - CVE-2026-73647
Quasar Framework: Prototype pollution in Quasar extend() uti - CVE-2026-73562
Mongoose: Prototype pollution in the update casting via __pr - CVE-2026-73088
Browserslist: Uncaught crash / prototype write via untrusted
V. Comments for CVE-2026-23929
No comments yet