CH
Product
Checkmk
45
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 9Medium 33Low 3
Watch
Add Checkmk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24096 | 8.8 | Apr 1 | Insufficient permission validation on multiple REST API Quick Setup endpoints Affected: 2.5.0b1 before 2.5.0b2; 2.4.0 before 2.4.0p25 |
| CVE-2026-14452 | 8.6 | Oct 16 | Open redirect and XSS via reset_url parameter Affected: 2.5.0 before 2.5.0p15; 2.4.0 before 2.4.0p38; 2.3.0 before 2.3.0p51; 2.2.0 |
| CVE-2025-39663 | 8.4 | Oct 30 | Cross Site Scripting through compromised remote site Affected: 2.4.0 before 2.4.0p14; 2.3.0 before 2.3.0p39; 2.2.0; 2.1.0 |
| CVE-2024-47091 | 7.8 | May 13 | Privilege escalation via mk_mysql agent plugin on Windows Affected: 2.4.0 before 2.4.0p29; 2.3.0 before 2.3.0p47; 2.2.0 |
| CVE-2025-32919 | 7.8 | Oct 9 | Privilege Escalation in Windows License plugin for Checkmk Windows Agent Affected: 2.4.0 before 2.4.0p13; 2.3.0 before 2.3.0p38; 2.2.0 before 2.2.0p46; 2.1.0 |
| CVE-2026-33456 | 7.6 | Apr 10 | Potential livestatus injection in notification test Affected: 2.5.0 before 2.5.0b4; 2.4.0 before 2.4.0p26 |
| CVE-2024-6572 | 7.4 | Sep 9 | Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' Affected: 2.3.0 before 2.3.0p15; 2.2.0 before 2.2.0p33; 2.1.0 before 2.1.0p48; 2.0.0 through 2.0.0p39 |
| CVE-2025-39666 | 7.3 | Apr 7 | omd: Local privilege escalation when executing omd commands as root Affected: 2.2.0; 2.3.0 before 2.3.0p46; 2.4.0 before 2.4.0p25; 2.5.0b1 before 2.5.0b3 |
| CVE-2025-64998 | 7.2 | Mar 24 | Session hijacking via exposed session signing secret in distributed Checkmk setups Affected: 2.4.0 before 2.4.0p23; 2.3.0 before 2.3.0p45; 2.2.0 |
Showing 9