Known Vulnerabilities for Checkmk by Tribe29
Listed below are 10 of the newest known vulnerabilities associated with "Checkmk" by "Tribe29".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-33457 json | Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user ... | Not Provided | 2026-04-10 | 2026-04-14 |
| CVE-2026-33456 json | Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access... | Not Provided | 2026-04-10 | 2026-04-14 |
| CVE-2026-33455 json | Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus ... | Not Provided | 2026-04-10 | 2026-04-14 |
| CVE-2026-33276 json | Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-24096 json | Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 ... | Not Provided | 2026-04-01 | 2026-04-01 |
| CVE-2026-20915 json | Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission t... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-9549 json | Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-8833 json | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, ... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-8078 json | Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versio... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-7765 json | Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to re... | Not Provided | 2026-06-08 | 2026-06-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.6.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 | |||
| Application | Tribe29 | Checkmk | 1.5.0 |