Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk_gmbh:checkmk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCheckmk Gmbh (0568c53a-1331-5a7f-b080-5e4df3236c02)
ProductCheckmk (7de06420-b37e-5b27-8f58-6b5030c0118d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14452 vulnerable 2026-11-03 10:16:32.389990 Open redirect and XSS via reset_url parameter
Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redirect that user to an arbitrary external site, by tricking the user into opening a crafted URL and clicking the Reset button or submitting an empty search.
Published: 2026-10-16T09:51:30.453Z
Updated: 2026-10-16T10:40:17.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113461 vulnerable 2026-11-03 10:16:27.716684 mk-oracle: Local privilege escalation via insecure Oracle Home library loading
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
Published: 2026-10-21T18:11:34.774Z
Updated: 2026-10-23T11:06:22.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-117611 vulnerable 2026-11-03 10:15:33.523962 Trust of compromised eMudhra root CA in bundled CA stores
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
Published: 2026-10-29T09:32:57.964Z
Updated: 2026-10-29T14:13:09.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-92882 vulnerable 2026-10-13 12:28:53.790910 Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses
Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases and IPMI passwords in clear text from GET responses, although the setup GUI never displays these values.
Published: 2026-09-22T10:42:59.432Z
Updated: 2026-10-05T14:14:15.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90990 vulnerable 2026-10-13 12:28:51.209036 Livestatus injection via monitoring filter values
Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services outside their contact groups and occupying web server and Livestatus workers for an attacker-controlled duration.
Published: 2026-09-22T10:43:28.959Z
Updated: 2026-09-22T13:04:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-77021 vulnerable 2026-10-13 12:28:29.599978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15227 vulnerable 2026-09-16 04:33:06.155636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9549 vulnerable 2026-07-29 01:09:07.160467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8833 vulnerable 2026-07-29 01:09:06.307838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8593 vulnerable 2026-07-29 01:09:06.000524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8078 vulnerable 2026-07-29 01:09:05.520667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7765 vulnerable 2026-07-29 01:09:05.219312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7186 vulnerable 2026-07-29 01:09:04.275333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14852 vulnerable 2026-07-29 00:26:17.609252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3466 vulnerable 2026-06-08 08:01:18.728273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3103 vulnerable 2026-06-08 08:01:17.756065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33457 vulnerable 2026-06-08 07:59:10.048352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33456 vulnerable 2026-06-08 07:59:10.016451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33455 vulnerable 2026-06-08 07:59:10.012155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33276 vulnerable 2026-06-08 07:59:09.462702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2859 vulnerable 2026-06-08 07:55:17.614309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24097 vulnerable 2026-06-08 07:51:17.031723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24096 vulnerable 2026-06-08 07:51:17.001189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24095 vulnerable 2026-06-08 07:51:16.998307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20915 vulnerable 2026-06-08 07:49:13.408709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65000 vulnerable 2026-06-08 07:39:20.589323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64999 vulnerable 2026-06-08 07:39:20.579094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64998 vulnerable 2026-06-08 07:39:20.509734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64997 vulnerable 2026-06-08 07:39:20.495105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64996 vulnerable 2026-06-08 07:39:20.426690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58122 vulnerable 2026-06-08 07:35:17.263097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58121 vulnerable 2026-06-08 07:35:17.228893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3506 vulnerable 2026-06-08 07:23:09.008199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39666 vulnerable 2026-06-08 07:23:06.952792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39664 vulnerable 2026-06-08 07:23:06.896234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39663 vulnerable 2026-06-08 07:23:06.834564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32919 vulnerable 2026-06-08 07:19:01.152604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32918 vulnerable 2026-06-08 07:19:01.124994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32917 vulnerable 2026-06-08 07:19:01.109034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32916 vulnerable 2026-06-08 07:19:01.079996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32915 vulnerable 2026-06-08 07:19:00.963872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2596 vulnerable 2026-06-08 07:16:57.632761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2092 vulnerable 2026-06-08 07:14:57.899352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1712 vulnerable 2026-06-08 07:08:37.791341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1075 vulnerable 2026-06-08 07:06:36.754820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8606 vulnerable 2026-06-08 07:00:25.196961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6747 vulnerable 2026-06-08 06:58:20.305887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6572 vulnerable 2026-06-08 06:58:19.878750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6542 vulnerable 2026-06-08 06:58:19.736671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6163 vulnerable 2026-06-08 06:58:18.009644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6052 vulnerable 2026-06-08 06:58:17.446306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5741 vulnerable 2026-06-08 06:56:17.147451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47094 vulnerable 2026-06-08 06:48:11.284254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47091 vulnerable 2026-06-08 06:48:11.279831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3367 vulnerable 2026-06-08 06:41:53.026050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38865 vulnerable 2026-06-08 06:41:48.439454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38864 vulnerable 2026-06-08 06:41:48.393529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38863 vulnerable 2026-06-08 06:41:48.388407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38862 vulnerable 2026-06-08 06:41:48.366017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38860 vulnerable 2026-06-08 06:41:48.343836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38859 vulnerable 2026-06-08 06:41:48.323089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38858 vulnerable 2026-06-08 06:41:48.316197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38857 vulnerable 2026-06-08 06:41:48.234638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2380 vulnerable 2026-06-08 06:33:30.972343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28833 vulnerable 2026-06-08 06:33:27.688475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28832 vulnerable 2026-06-08 06:33:27.681930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28831 vulnerable 2026-06-08 06:33:27.678704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28830 vulnerable 2026-06-08 06:33:27.662458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28829 vulnerable 2026-06-08 06:33:27.616868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28828 vulnerable 2026-06-08 06:33:27.570691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28827 vulnerable 2026-06-08 06:33:27.541004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28826 vulnerable 2026-06-08 06:33:27.518520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28825 vulnerable 2026-06-08 06:33:27.495021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28824 vulnerable 2026-06-08 06:33:27.407398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1742 vulnerable 2026-06-08 06:27:14.277856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0670 vulnerable 2026-06-08 06:22:01.687461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0638 vulnerable 2026-06-08 06:22:01.547119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6740 vulnerable 2026-06-08 06:21:55.534227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6735 vulnerable 2026-06-08 06:21:55.399583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6251 vulnerable 2026-06-08 06:19:46.760808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6157 vulnerable 2026-06-08 06:19:46.459092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6156 vulnerable 2026-06-08 06:19:46.373735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31211 vulnerable 2026-06-08 06:04:42.313845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31210 vulnerable 2026-06-08 06:04:42.306582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31209 vulnerable 2026-06-08 06:04:42.277986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31208 vulnerable 2026-06-08 06:04:42.256048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23549 vulnerable 2026-06-08 05:56:02.950654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23548 vulnerable 2026-06-08 05:56:02.876351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22348 vulnerable 2026-06-08 05:54:24.696261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.