Checkmk GmbH — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by Checkmk GmbH (checkmk). https://vulnogram.org/seaview/icons/checkmk.png Checkmk GmbH — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2026-14452 · 8.6 HIGH — Open redirect and XSS via reset_url parameter https://vulnogram.org/CVE-2026-14452 https://vulnogram.org/CVE-2026-14452 Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redi… High Fri, 16 Oct 2026 09:51:30 GMT CVE-2026-105331 · 5.2 MEDIUM — mk-oracle: Local privilege escalation via malicious Oracle Instant Client https://vulnogram.org/CVE-2026-105331 https://vulnogram.org/CVE-2026-105331 Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled. Medium Thu, 08 Oct 2026 14:19:41 GMT CVE-2026-90990 · 5.3 MEDIUM — Livestatus injection via monitoring filter values https://vulnogram.org/CVE-2026-90990 https://vulnogram.org/CVE-2026-90990 Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queri… Medium Tue, 22 Sep 2026 10:43:28 GMT CVE-2026-92882 · 2.3 LOW — Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses https://vulnogram.org/CVE-2026-92882 https://vulnogram.org/CVE-2026-92882 Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticated user who may view a host's configuration to read stored SNMP commun… Low Tue, 22 Sep 2026 10:42:59 GMT CVE-2026-77021 · 5.3 MEDIUM — Missing decompression size limit in agent receiver allows memory exhaustion via push agent data https://vulnogram.org/CVE-2026-77021 https://vulnogram.org/CVE-2026-77021 Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small… Medium Mon, 21 Sep 2026 10:57:37 GMT CVE-2026-15937 · 5.3 MEDIUM — Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint https://vulnogram.org/CVE-2026-15937 https://vulnogram.org/CVE-2026-15937 Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not ve… Medium Fri, 04 Sep 2026 08:24:49 GMT CVE-2026-17548 · 5.3 MEDIUM — Missing authorization for viewing background jobs https://vulnogram.org/CVE-2026-17548 https://vulnogram.org/CVE-2026-17548 Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results. Medium Tue, 25 Aug 2026 08:35:17 GMT CVE-2026-15576 · 6.9 MEDIUM — Agent receiver accepts mTLS requests without a client certificate https://vulnogram.org/CVE-2026-15576 https://vulnogram.org/CVE-2026-15576 Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulti… Medium Fri, 21 Aug 2026 11:10:00 GMT CVE-2026-7485 · 2.3 LOW — Frozen BI aggregations leak host and service names to unauthorized users https://vulnogram.org/CVE-2026-7485 https://vulnogram.org/CVE-2026-7485 Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services th… Low Thu, 20 Aug 2026 12:12:52 GMT CVE-2026-15227 · 5.3 MEDIUM — Missing Authorization Allows Editing of Foreign Reports https://vulnogram.org/CVE-2026-15227 https://vulnogram.org/CVE-2026-15227 Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users. Medium Fri, 31 Jul 2026 12:21:58 GMT CVE-2026-8593 · 5.3 MEDIUM — Fix Business Intelligence API Pack permission https://vulnogram.org/CVE-2026-8593 https://vulnogram.org/CVE-2026-8593 Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows users without permissions to view and modify BI packs and rules Medium Tue, 21 Jul 2026 07:20:35 GMT CVE-2026-14852 · 5.2 MEDIUM — mk_sap_hana: Privilege escalation via crafted sapstartsrv process name https://vulnogram.org/CVE-2026-14852 https://vulnogram.org/CVE-2026-14852 Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows a local unprivileged user to execute arbitrary commands as root by starting a process crafted to look like a SAP HANA… Medium Tue, 14 Jul 2026 09:26:28 GMT CVE-2026-9549 · 4.8 MEDIUM — Fix XSS in service discovery active check output https://vulnogram.org/CVE-2026-9549 https://vulnogram.org/CVE-2026-9549 Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into c… Medium Mon, 08 Jun 2026 12:07:12 GMT CVE-2026-8833 · 8.5 HIGH — XSS in urls https://vulnogram.org/CVE-2026-8833 https://vulnogram.org/CVE-2026-8833 Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: UR… High Mon, 08 Jun 2026 12:06:51 GMT CVE-2026-8078 · 4.8 MEDIUM — Fix stored XSS in global settings change log https://vulnogram.org/CVE-2026-8078 https://vulnogram.org/CVE-2026-8078 Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that ex… Medium Mon, 08 Jun 2026 12:06:36 GMT CVE-2026-7765 · 6.3 MEDIUM — User Messages widget leaked issuer messages on shared dashboards https://vulnogram.org/CVE-2026-7765 https://vulnogram.org/CVE-2026-7765 Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share… Medium Mon, 08 Jun 2026 12:06:02 GMT CVE-2026-7186 · 8.5 HIGH — Fix stored XSS in URL dashboard widget via dangerous URI schemes https://vulnogram.org/CVE-2026-7186 https://vulnogram.org/CVE-2026-7186 Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes sc… High Mon, 08 Jun 2026 12:05:28 GMT CVE-2024-47091 · 5.2 MEDIUM — Privilege escalation via mk_mysql agent plugin on Windows https://vulnogram.org/CVE-2024-47091 https://vulnogram.org/CVE-2024-47091 Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' (or with write access to a binary… Medium Wed, 13 May 2026 08:35:25 GMT CVE-2026-33457 · 5.3 MEDIUM — Potential livestatus injection in prediction graph page https://vulnogram.org/CVE-2026-33457 https://vulnogram.org/CVE-2026-33457 Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service… Medium Fri, 10 Apr 2026 08:31:35 GMT CVE-2026-33456 · 5.1 MEDIUM — Potential livestatus injection in notification test https://vulnogram.org/CVE-2026-33456 https://vulnogram.org/CVE-2026-33456 Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description. Medium Fri, 10 Apr 2026 08:31:27 GMT CVE-2026-33455 · 5.3 MEDIUM — Livestatus injection in monitoring quicksearch https://vulnogram.org/CVE-2026-33455 https://vulnogram.org/CVE-2026-33455 Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins. Medium Fri, 10 Apr 2026 08:30:20 GMT CVE-2025-39666 · 9.3 CRITICAL — omd: Local privilege escalation when executing omd commands as root https://vulnogram.org/CVE-2025-39666 https://vulnogram.org/CVE-2025-39666 Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escalate their privileges to root, by manipulating files in the site contex… Critical Tue, 07 Apr 2026 12:09:07 GMT CVE-2026-3466 · 8.5 HIGH — Cross-site scripting in dashlet title https://vulnogram.org/CVE-2026-3466 https://vulnogram.org/CVE-2026-3466 Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform st… High Tue, 07 Apr 2026 12:08:50 GMT CVE-2026-24096 · 5.3 MEDIUM — Insufficient permission validation on multiple REST API Quick Setup endpoints https://vulnogram.org/CVE-2026-24096 https://vulnogram.org/CVE-2026-24096 Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information Medium Wed, 01 Apr 2026 10:07:21 GMT CVE-2026-20915 · 8.5 HIGH — Stored cross-site scripting in Pending Changes sidebar https://vulnogram.org/CVE-2026-20915 https://vulnogram.org/CVE-2026-20915 Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers… High Tue, 31 Mar 2026 13:51:02 GMT CVE-2026-33276 · 8.6 HIGH — XSS in Unified Search via Unescaped Host/Service Names https://vulnogram.org/CVE-2026-33276 https://vulnogram.org/CVE-2026-33276 Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search f… High Tue, 31 Mar 2026 13:44:17 GMT CVE-2025-64998 · 7.3 HIGH — Session hijacking via exposed session signing secret in distributed Checkmk setups https://vulnogram.org/CVE-2025-64998 https://vulnogram.org/CVE-2025-64998 Exposure of session signing secret in Checkmk <2.4.0p23, <2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on the central site by forging session cookies. High Tue, 24 Mar 2026 11:25:58 GMT CVE-2026-2859 · 6.3 MEDIUM — Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint https://vulnogram.org/CVE-2026-2859 https://vulnogram.org/CVE-2026-2859 Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observing different HTTP response codes in deploy_agent endpoint, which coul… Medium Fri, 13 Mar 2026 09:40:43 GMT CVE-2026-24097 · 5.3 MEDIUM — Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint https://vulnogram.org/CVE-2026-24097 https://vulnogram.org/CVE-2026-24097 Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing en… Medium Fri, 13 Mar 2026 09:40:05 GMT CVE-2026-3103 · 5.3 MEDIUM — Deletion of passwords via RestApi https://vulnogram.org/CVE-2026-3103 https://vulnogram.org/CVE-2026-3103 A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss. Medium Wed, 04 Mar 2026 13:15:41 GMT CVE-2025-64999 · 7.3 HIGH — Cross-site scripting in HTML logs of Synthetic Monitoring test services https://vulnogram.org/CVE-2025-64999 https://vulnogram.org/CVE-2025-64999 Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then… High Thu, 26 Feb 2026 10:26:00 GMT CVE-2026-24095 · 5.3 MEDIUM — Missing Permission Check on Analyze Configuration Page https://vulnogram.org/CVE-2026-24095 https://vulnogram.org/CVE-2026-24095 Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the… Medium Mon, 09 Feb 2026 15:29:16 GMT CVE-2025-65000 · 2.3 LOW — Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule https://vulnogram.org/CVE-2025-65000 https://vulnogram.org/CVE-2025-65000 SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts… Low Thu, 18 Dec 2025 14:04:12 GMT CVE-2025-64997 · 6.3 MEDIUM — Insufficient permission validation when showing agent information https://vulnogram.org/CVE-2025-64997 https://vulnogram.org/CVE-2025-64997 Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure. Medium Thu, 18 Dec 2025 09:11:17 GMT CVE-2025-39665 · 6.9 MEDIUM — Livestatus Injection in dynmaps https://vulnogram.org/CVE-2025-39665 https://vulnogram.org/CVE-2025-39665 User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames. Medium Wed, 03 Dec 2025 09:55:41 GMT CVE-2025-58121 · 5.3 MEDIUM — Insufficient permission validation on multiple REST API endpoints https://vulnogram.org/CVE-2025-58121 https://vulnogram.org/CVE-2025-58121 Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information Medium Tue, 18 Nov 2025 15:11:35 GMT CVE-2025-58122 · 5.3 MEDIUM — Insufficient permission validation when configuring notification parameters https://vulnogram.org/CVE-2025-58122 https://vulnogram.org/CVE-2025-58122 Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure. Medium Tue, 18 Nov 2025 15:11:17 GMT CVE-2025-64996 · 4.8 MEDIUM — Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output https://vulnogram.org/CVE-2025-64996 https://vulnogram.org/CVE-2025-64996 In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially le… Medium Tue, 18 Nov 2025 15:10:53 GMT CVE-2025-39663 · 8.5 HIGH — Cross Site Scripting through compromised remote site https://vulnogram.org/CVE-2025-39663 https://vulnogram.org/CVE-2025-39663 Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 (eol). High Thu, 30 Oct 2025 10:43:08 GMT CVE-2025-39664 · 7.1 HIGH — Path-Traversal in report scheduler https://vulnogram.org/CVE-2025-39664 https://vulnogram.org/CVE-2025-39664 Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory. High Thu, 09 Oct 2025 15:01:55 GMT CVE-2025-32919 · 8.8 HIGH — Privilege Escalation in Windows License plugin for Checkmk Windows Agent https://vulnogram.org/CVE-2025-32919 https://vulnogram.org/CVE-2025-32919 Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all ve… High Thu, 09 Oct 2025 15:01:42 GMT CVE-2025-32916 · 1 LOW — Sensitive form data in URL query parameters https://vulnogram.org/CVE-2025-32916 https://vulnogram.org/CVE-2025-32916 Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places suc… Low Thu, 09 Oct 2025 15:00:58 GMT CVE-2025-58127 · 6.9 MEDIUM — Lack of TLS validation in plugin Dell Powerscale on Checkmk Exchange https://vulnogram.org/CVE-2025-58127 https://vulnogram.org/CVE-2025-58127 Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic. Medium Thu, 28 Aug 2025 12:59:36 GMT CVE-2025-58126 · 6.9 MEDIUM — Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange https://vulnogram.org/CVE-2025-58126 https://vulnogram.org/CVE-2025-58126 Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic. Medium Thu, 28 Aug 2025 12:59:33 GMT CVE-2025-58125 · 6.9 MEDIUM — Lack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange https://vulnogram.org/CVE-2025-58125 https://vulnogram.org/CVE-2025-58125 Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic. Medium Thu, 28 Aug 2025 12:59:31 GMT CVE-2025-58124 · 6.9 MEDIUM — Lack of TLS validation in plugin check-mk-api on Checkmk Exchange https://vulnogram.org/CVE-2025-58124 https://vulnogram.org/CVE-2025-58124 Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic. Medium Thu, 28 Aug 2025 12:59:28 GMT CVE-2025-58123 · 6.9 MEDIUM — Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange https://vulnogram.org/CVE-2025-58123 https://vulnogram.org/CVE-2025-58123 Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic. Medium Thu, 28 Aug 2025 12:59:25 GMT CVE-2025-32918 · 5.3 MEDIUM — Livestatus injection in autocomplete endpoint https://vulnogram.org/CVE-2025-32918 https://vulnogram.org/CVE-2025-32918 Improper neutralization of Livestatus command delimiters in autocomplete endpoint within the RestAPI of Checkmk versions <2.4.0p6, <2.3.0p35, <2.2.0p44, and 2.1.0 (EOL) allows an authenticated user to inject arbitrary Livestatus commands. Medium Fri, 04 Jul 2025 08:12:21 GMT CVE-2024-47090 · 5.1 MEDIUM — XSS via WYSIWYG editor https://vulnogram.org/CVE-2024-47090 https://vulnogram.org/CVE-2024-47090 Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS Medium Tue, 27 May 2025 07:02:53 GMT CVE-2024-38866 · 5.3 MEDIUM — Livestatus Injection in dynmaps https://vulnogram.org/CVE-2024-38866 https://vulnogram.org/CVE-2024-38866 Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection Medium Tue, 27 May 2025 07:01:35 GMT