Known Vulnerabilities for Checkmk by Tribe29
Listed below are 10 of the newest known vulnerabilities associated with "Checkmk" by "Tribe29".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-14852 json | Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) ... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-9549 json | Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-8833 json | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, ... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-8078 json | Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versio... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-7765 json | Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to re... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-7186 json | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions all... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-3466 json | Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4... | Not Provided | 2026-04-07 | 2026-04-22 |
| CVE-2024-47091 json | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2023-31211 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2024-01-12 | 2024-01-19 |
| CVE-2023-31210 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.8 - HIGH | 2023-12-13 | 2023-12-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 |