Known Vulnerabilities for products from Checkmk
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Checkmk".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-33457 json | Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user ... | Not Provided | 2026-04-10 | 2026-04-20 |
| CVE-2026-33456 json | Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access... | Not Provided | 2026-04-10 | 2026-04-20 |
| CVE-2026-33455 json | Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus ... | Not Provided | 2026-04-10 | 2026-04-20 |
| CVE-2026-33276 json | Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create... | Not Provided | 2026-03-31 | 2026-04-02 |
| CVE-2026-24096 json | Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 ... | Not Provided | 2026-04-01 | 2026-04-07 |
| CVE-2026-20915 json | Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission t... | Not Provided | 2026-03-31 | 2026-04-02 |
| CVE-2026-3466 json | Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4... | Not Provided | 2026-04-07 | 2026-04-22 |
| CVE-2025-39666 json | Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk ... | Not Provided | 2026-04-07 | 2026-04-14 |
| CVE-2021-36563 json | The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the WATO m... | 5.4 - MEDIUM | 2021-07-26 | 2021-09-16 |