CVE-2026-59782

Public on 2026-10-05
Modified on 2026-10-08
Description
The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
4.9
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 duktape Not Affected
Amazon Linux 2027 Preview duktape Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N