CH
Product
Checkmk
52
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 14Medium 35Low 3
Watch
Add Checkmk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15576 | 6.9 | Aug 21 | Agent receiver accepts mTLS requests without a client certificate Affected: 2.5.0 before 2.5.0p10 |
| CVE-2025-64997 | 6.5 | Dec 18 | Insufficient permission validation when showing agent information Affected: 2.4.0 before 2.4.0p17; 2.3.0 before 2.3.0p42 |
| CVE-2025-39664 | 6.5 | Oct 9 | Path-Traversal in report scheduler Affected: 2.4.0 before 2.4.0p13; 2.3.0 before 2.3.0p38; 2.2.0 before 2.2.0p46; 2.1.0 |
| CVE-2026-33457 | 6.3 | Apr 10 | Potential livestatus injection in prediction graph page Affected: 2.5.0 before 2.5.0b4; 2.4.0 before 2.4.0p26; 2.3.0 before 2.3.0p47 |
| CVE-2026-33455 | 6.3 | Apr 10 | Livestatus injection in monitoring quicksearch Affected: 2.5.0 before 2.5.0b4 |
| CVE-2024-38858 | 6.1 | Sep 2 | Cross-site scripting in Robotmk logs view Affected: 2.3.0 before 2.3.0p14 |
| CVE-2025-32915 | 5.5 | May 22 | Sensitive data exposed during automatic agent updates Affected: 2.4.0 before 2.4.0p1; 2.3.0 before 2.3.0p32; 2.2.0 before 2.2.0p42; 2.1.0 |
| CVE-2026-8833 | 5.4 | Jun 8 | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validatio Affected: 2.5.0 before 2.5.0p5; 2.4.0 before 2.4.0p31; 2.3.0 before 2.3.0p48; 2.2.0 |
| CVE-2026-7186 | 5.4 | Jun 8 | Fix stored XSS in URL dashboard widget via dangerous URI schemes Affected: 2.5.0 before 2.5.0p5; 2.4.0 before 2.4.0p31; 2.3.0 before 2.3.0p48; 2.2.0 |
| CVE-2026-3466 | 5.4 | Apr 7 | Cross-site scripting in dashlet title Affected: 2.2.0; 2.3.0 before 2.3.0p46; 2.4.0 before 2.4.0p25; 2.5.0b1 before 2.5.0 |
| CVE-2026-20915 | 5.4 | Mar 31 | Stored cross-site scripting in Pending Changes sidebar Affected: 2.5.0b1 before 2.5.0b2 |
| CVE-2026-33276 | 5.4 | Mar 31 | XSS in Unified Search via Unescaped Host/Service Names Affected: 2.5.0b1 before 2.5.0b2 |
| CVE-2026-3103 | 5.4 | Mar 4 | Deletion of passwords via RestApi Affected: 2.4.0 before 2.4.0p23; 2.3.0 before 2.3.0p43; 2.2.0 |
| CVE-2025-64999 | 5.4 | Feb 26 | Cross-site scripting in HTML logs of Synthetic Monitoring test services Affected: 2.4.0 before 2.4.0p22; 2.3.0 before 2.3.0p43 |
| CVE-2025-58121 | 5.4 | Nov 18 | Insufficient permission validation on multiple REST API endpoints Affected: 2.4.0 before 2.4.0p16; 2.3.0; 2.2.0 |
| CVE-2025-58122 | 5.4 | Nov 18 | Insufficient permission validation when configuring notification parameters Affected: 2.4.0 before 2.4.0p16 |
| CVE-2026-90990 | 5.3 | Sep 22 | Livestatus injection via monitoring filter values Affected: 2.5.0 before 2.5.0p14 |
| CVE-2026-77021 | 5.3 | Sep 21 | Missing decompression size limit in agent receiver allows memory exhaustion via push agent data Affected: 2.5.0 before 2.5.0p14; 2.4.0 before 2.4.0p37; 2.3.0 before 2.3.0p51; 2.2.0 |
| CVE-2026-15937 | 5.3 | Sep 4 | Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint Affected: 2.5.0 before 2.5.0p10 |
| CVE-2026-17548 | 5.3 | Aug 25 | Missing authorization for viewing background jobs Affected: 2.5.0 before 2.5.0p12; 2.4.0 before 2.4.0p36; 2.3.0 before 2.3.0p50; 2.2.0 |
| CVE-2026-15227 | 5.3 | Jul 31 | Missing Authorization Allows Editing of Foreign Reports Affected: 2.5.0 before 2.5.0p10; 2.4.0 before 2.4.0p35; 2.3.0 before 2.3.0p49; 2.2.0 |
| CVE-2026-8593 | 5.3 | Jul 21 | Fix Business Intelligence API Pack permission Affected: 2.5.0 before 2.5.0p9; 2.4.0 before 2.4.0p34; 2.3.0 before 2.3.0p49 |
| CVE-2026-7765 | 5.3 | Jun 8 | User Messages widget leaked issuer messages on shared dashboards Affected: 2.5.0 before 2.5.0p5 |
| CVE-2026-24095 | 5.3 | Feb 9 | Missing Permission Check on Analyze Configuration Page Affected: 2.4.0 before 2.4.0p21; 2.3.0 before 2.3.0p43; 2.2.0 |
| CVE-2025-65000 | 5.3 | Dec 18 | Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule Affected: 2.4.0 before 2.4.0p18; 2.3.0 |
| CVE-2025-3506 | 5.3 | May 8 | Potentially senitive path exposed via unauthenticated http route Affected: 2.4.0 before 2.4.0b6; 2.3.0; 2.2.0; 2.1.0 through 2.1.0p50 |
| CVE-2026-113461 | 5.2 | Oct 21 | mk-oracle: Local privilege escalation via insecure Oracle Home library loading Affected: 2.5.0p14 |
| CVE-2026-105331 | 5.2 | Oct 8 | mk-oracle: Local privilege escalation via malicious Oracle Instant Client Affected: 2.5.0 before 2.5.0p10 |
| CVE-2026-14852 | 5.2 | Jul 14 | mk_sap_hana: Privilege escalation via crafted sapstartsrv process name Affected: 2.5.0 before 2.5.0p9; 2.4.0 before 2.4.0p34; 2.3.0 before 2.3.0p49; 2.2.0 |
| CVE-2026-9549 | 4.8 | Jun 8 | Fix XSS in service discovery active check output Affected: 2.5.0 before 2.5.0p5; 2.4.0 before 2.4.0p31; 2.3.0 before 2.3.0p48; 2.2.0 |
| CVE-2026-8078 | 4.8 | Jun 8 | Fix stored XSS in global settings change log Affected: 2.5.0 before 2.5.0p5; 2.4.0 before 2.4.0p31; 2.3.0 before 2.3.0p48; 2.2.0 |
| CVE-2025-64996 | 4.4 | Nov 18 | Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output Affected: 2.4.0 before 2.4.0p16; 2.3.0 before 2.3.0p41; 2.2.0; 2.1.0 |
| CVE-2026-2859 | 4.3 | Mar 13 | Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint Affected: 2.4.0 before 2.4.0p23; 2.3.0 before 2.3.0p43; 2.2.0 |
| CVE-2026-24097 | 4.3 | Mar 13 | Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint Affected: 2.4.0 before 2.4.0p23; 2.3.0 before 2.3.0p43; 2.2.0 |
| CVE-2025-32916 | 4.3 | Oct 9 | Sensitive form data in URL query parameters Affected: 2.4.0 before 2.4.0p13; 2.3.0 before 2.3.0p38; 2.2.0 before 2.2.0p46; 2.1.0 |
Showing 35