Checkmk Gmbh vulnerabilities

Products

• Checkmk 117
• Appliance 5

Newest

• checkmk gmbh checkmk Path traversal in host label synchronization allows code execution on the central site from a remote site CVE-2026-118965 9.4 CriticalNovember 11, 2026
• checkmk gmbh checkmk Arbitrary file write and code execution via crafted Synthetic Monitoring agent data CVE-2026-120495 9.4 CriticalNovember 11, 2026
• checkmk gmbh checkmk Arbitrary file write and code execution via excluded node roles in Kubernetes special agent CVE-2026-121374 9.4 CriticalNovember 11, 2026
• checkmk gmbh checkmk Privilege escalation via unprotected Windows agent data folder CVE-2026-111573 6.3 MediumNovember 6, 2026
• checkmk gmbh checkmk Jolokia special agent exposes password in process list CVE-2026-103682 2.0 LowNovember 6, 2026
• checkmk gmbh checkmk NetApp ONTAP special agent exposes password in process list CVE-2026-103674 2.0 LowNovember 6, 2026
• checkmk gmbh checkmk Trust of compromised eMudhra root CA in bundled CA stores CVE-2026-117611 7.1 HighOctober 29, 2026
• checkmk gmbh checkmk mk-oracle: Local privilege escalation via insecure Oracle Home library loading CVE-2026-113461 5.2 MediumOctober 21, 2026
• checkmk gmbh checkmk Open redirect and XSS via reset_url parameter CVE-2026-14452 8.6 HighOctober 16, 2026
• checkmk gmbh checkmk mk-oracle: Local privilege escalation via malicious Oracle Instant Client CVE-2026-105331 5.2 MediumOctober 8, 2026
• checkmk gmbh checkmk Livestatus injection via monitoring filter values CVE-2026-90990 5.3 MediumSeptember 22, 2026
• checkmk gmbh checkmk Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses CVE-2026-92882 2.3 LowSeptember 22, 2026
• checkmk gmbh checkmk Missing decompression size limit in agent receiver allows memory exhaustion via push agent data CVE-2026-77021 5.3 MediumSeptember 21, 2026
• checkmk gmbh checkmk Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint CVE-2026-15937 5.3 MediumSeptember 4, 2026
• checkmk gmbh checkmk Missing authorization for viewing background jobs CVE-2026-17548 5.3 MediumAugust 25, 2026
• checkmk gmbh checkmk Agent receiver accepts mTLS requests without a client certificate CVE-2026-15576 6.9 MediumAugust 21, 2026
• checkmk gmbh checkmk Frozen BI aggregations leak host and service names to unauthorized users CVE-2026-7485 2.3 LowAugust 20, 2026
• checkmk gmbh checkmk Missing Authorization Allows Editing of Foreign Reports CVE-2026-15227 5.3 MediumJuly 31, 2026
• checkmk gmbh checkmk Fix Business Intelligence API Pack permission CVE-2026-8593 5.3 MediumJuly 21, 2026
• checkmk gmbh checkmk mk_sap_hana: Privilege escalation via crafted sapstartsrv process name CVE-2026-14852 5.2 MediumJuly 14, 2026
• checkmk Fix XSS in service discovery active check output CVE-2026-9549 4.8 MediumJune 8, 2026
• checkmk XSS in urls CVE-2026-8833 8.5 HighJune 8, 2026
• checkmk Fix stored XSS in global settings change log CVE-2026-8078 4.8 MediumJune 8, 2026
• checkmk User Messages widget leaked issuer messages on shared dashboards CVE-2026-7765 6.3 MediumJune 8, 2026
• checkmk Fix stored XSS in URL dashboard widget via dangerous URI schemes CVE-2026-7186 8.5 HighJune 8, 2026
• checkmk Privilege escalation via mk_mysql agent plugin on Windows CVE-2024-47091 5.2 MediumMay 13, 2026
• checkmk Potential livestatus injection in prediction graph page CVE-2026-33457 5.3 MediumApril 10, 2026
• checkmk Potential livestatus injection in notification test CVE-2026-33456 5.1 MediumApril 10, 2026
• checkmk Livestatus injection in monitoring quicksearch CVE-2026-33455 5.3 MediumApril 10, 2026
• checkmk omd: Local privilege escalation when executing omd commands as root CVE-2025-39666 9.3 CriticalApril 7, 2026
• checkmk Cross-site scripting in dashlet title CVE-2026-3466 8.5 HighApril 7, 2026
• checkmk Insufficient permission validation on multiple REST API Quick Setup endpoints CVE-2026-24096 5.3 MediumApril 1, 2026
• checkmk Stored cross-site scripting in Pending Changes sidebar CVE-2026-20915 8.5 HighMarch 31, 2026
• checkmk XSS in Unified Search via Unescaped Host/Service Names CVE-2026-33276 8.6 HighMarch 31, 2026
• checkmk Session hijacking via exposed session signing secret in distributed Checkmk setups CVE-2025-64998 7.3 HighMarch 24, 2026
• checkmk Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint CVE-2026-2859 6.3 MediumMarch 13, 2026
• checkmk Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint CVE-2026-24097 5.3 MediumMarch 13, 2026
• checkmk Deletion of passwords via RestApi CVE-2026-3103 5.3 MediumMarch 4, 2026
• checkmk Cross-site scripting in HTML logs of Synthetic Monitoring test services CVE-2025-64999 7.3 HighFebruary 26, 2026
• checkmk gmbh checkmk Missing Permission Check on Analyze Configuration Page CVE-2026-24095 5.3 MediumFebruary 9, 2026
• checkmk Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule CVE-2025-65000 2.3 LowDecember 18, 2025
• checkmk Insufficient permission validation when showing agent information CVE-2025-64997 6.3 MediumDecember 18, 2025
• checkmk Insufficient permission validation on multiple REST API endpoints CVE-2025-58121 5.3 MediumNovember 18, 2025
• checkmk Insufficient permission validation when configuring notification parameters CVE-2025-58122 5.3 MediumNovember 18, 2025
• checkmk Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output CVE-2025-64996 4.8 MediumNovember 18, 2025
• checkmk Cross Site Scripting through compromised remote site CVE-2025-39663 8.5 HighOctober 30, 2025
• checkmk Path-Traversal in report scheduler CVE-2025-39664 7.1 HighOctober 9, 2025
• checkmk Privilege Escalation in Windows License plugin for Checkmk Windows Agent CVE-2025-32919 8.8 HighOctober 9, 2025
• checkmk Sensitive form data in URL query parameters CVE-2025-32916 1.0 LowOctober 9, 2025
• checkmk Livestatus injection in autocomplete endpoint CVE-2025-32918 5.3 MediumJuly 4, 2025
• Show olderLoading…