Checkmk GmbH Checkmk vulnerabilities

CVEs per yearBy the year they were published

1. 202432
2. 202412
3. 202520
4. 202630

Newest CVEs

• CVE-2026-117611

  Trust of compromised eMudhra root CA in bundled CA stores

  Checkmk GmbH · Checkmk

  High7.1
• CVE-2026-113461

  mk-oracle: Local privilege escalation via insecure Oracle Home library loading

  Checkmk GmbH · Checkmk

  Medium5.2
• CVE-2026-14452

  Open redirect and XSS via reset_url parameter

  Checkmk GmbH · Checkmk

  High8.6
• CVE-2026-105331

  mk-oracle: Local privilege escalation via malicious Oracle Instant Client

  Checkmk GmbH · Checkmk

  Medium5.2
• CVE-2026-90990

  Livestatus injection via monitoring filter values

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-92882

  Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

  Checkmk GmbH · Checkmk

  Low2.3
• CVE-2026-77021

  Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-15937

  Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-17548

  Missing authorization for viewing background jobs

  Checkmk GmbH · Checkmk

  Medium5.3
• CVE-2026-15576

  Agent receiver accepts mTLS requests without a client certificate

  Checkmk GmbH · Checkmk

  Medium6.9