Security Advisory

CVE-2026-23922

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-18 12:13:38

Last updated 2026-08-18 16:02:15

Assigner Zabbix

CVSS score 2.1

State PUBLISHED

Description

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint.

← Browse all CVEs View on cve.org ↗