Known Vulnerabilities for Checkmk by Tribe29

Listed below are 9 of the newest known vulnerabilities associated with "Checkmk" by "Tribe29".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-33276 Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create... Not Provided 2026-03-31 2026-03-31
CVE-2026-24096 Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 ... Not Provided 2026-04-01 2026-04-01
CVE-2026-20915 Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission t... Not Provided 2026-03-31 2026-03-31
CVE-2022-24566 In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not ... 5.4 - MEDIUM 2022-02-24 2022-03-02
CVE-2022-24565 Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vu... 5.4 - MEDIUM 2022-02-24 2022-03-02
CVE-2022-24564 Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help ... 6.1 - MEDIUM 2022-02-21 2022-03-02
CVE-2021-40906 CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an u... 6.1 - MEDIUM 2022-03-25 2022-04-04
CVE-2021-40905 ** DISPUTED ** The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitis... 8.8 - HIGH 2022-03-25 2023-11-07
CVE-2021-40904 The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki... 8.8 - HIGH 2022-03-25 2022-04-04
CVE-2020-28919 A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker... 5.4 - MEDIUM 2022-01-15 2022-01-21
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationTribe29Checkmk1.6.0p4AllAll
ApplicationTribe29Checkmk1.6.0-AllAll
ApplicationTribe29Checkmk1.6.0b1AllAll
ApplicationTribe29Checkmk1.6.0b10AllAll
ApplicationTribe29Checkmk1.6.0b12AllAll
ApplicationTribe29Checkmk1.6.0b3AllAll
ApplicationTribe29Checkmk1.6.0b4AllAll
ApplicationTribe29Checkmk1.6.0b5AllAll
ApplicationTribe29Checkmk1.6.0b9AllAll
ApplicationTribe29Checkmk1.6.0p1AllAll
ApplicationTribe29Checkmk1.6.0p2AllAll
ApplicationTribe29Checkmk1.6.0p3AllAll
ApplicationTribe29Checkmk1.5.0p8AllAll
ApplicationTribe29Checkmk1.5.0b1AllAll
ApplicationTribe29Checkmk1.5.0b2AllAll
ApplicationTribe29Checkmk1.5.0b9AllAll
ApplicationTribe29Checkmk1.5.0i1AllAll
ApplicationTribe29Checkmk1.5.0i2AllAll
ApplicationTribe29Checkmk1.5.0i3AllAll
ApplicationTribe29Checkmk1.5.0i4AllAll
Results limited to 20 most recent known configurations
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report