Insufficient permission validation on multiple REST API Quick Setup endpoints

Open redirect and XSS via reset_url parameter

Privilege escalation via mk_mysql agent plugin on Windows

Potential livestatus injection in notification test

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

omd: Local privilege escalation when executing omd commands as root

Session hijacking via exposed session signing secret in distributed Checkmk setups

Agent receiver accepts mTLS requests without a client certificate

Insufficient permission validation when showing agent information

Potential livestatus injection in prediction graph page

Livestatus injection in monitoring quicksearch

Cross-site scripting in Robotmk logs view

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validatio

Fix stored XSS in URL dashboard widget via dangerous URI schemes

Cross-site scripting in dashlet title

Stored cross-site scripting in Pending Changes sidebar

XSS in Unified Search via Unescaped Host/Service Names

Deletion of passwords via RestApi

Cross-site scripting in HTML logs of Synthetic Monitoring test services

Livestatus injection via monitoring filter values

Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

Missing authorization for viewing background jobs

Missing Authorization Allows Editing of Foreign Reports

Fix Business Intelligence API Pack permission

User Messages widget leaked issuer messages on shared dashboards

Missing Permission Check on Analyze Configuration Page

Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

mk-oracle: Local privilege escalation via insecure Oracle Home library loading

mk-oracle: Local privilege escalation via malicious Oracle Instant Client

mk_sap_hana: Privilege escalation via crafted sapstartsrv process name

Fix XSS in service discovery active check output

Fix stored XSS in global settings change log

Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint

Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint

User-Readable Private Key in Windows Agent

Frozen BI aggregations leak host and service names to unauthorized users