# cve.now: Checkmk Gmbh

The newest entries naming Checkmk Gmbh as an affected vendor (up to 200), of 100 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-111573](https://cve.now/CVE-2026-111573.md): Privilege escalation via unprotected Windows agent data folder (CVSS 6.3)
- [CVE-2026-103682](https://cve.now/CVE-2026-103682.md): Jolokia special agent exposes password in process list (CVSS 2.0)
- [CVE-2026-103674](https://cve.now/CVE-2026-103674.md): NetApp ONTAP special agent exposes password in process list (CVSS 2.0)
- [CVE-2026-117611](https://cve.now/CVE-2026-117611.md): Trust of compromised eMudhra root CA in bundled CA stores (CVSS 7.1)
- [CVE-2026-113461](https://cve.now/CVE-2026-113461.md): mk-oracle: Local privilege escalation via insecure Oracle Home library loading (CVSS 5.2)
- [CVE-2026-14452](https://cve.now/CVE-2026-14452.md): Open redirect and XSS via reset\_url parameter (CVSS 8.6)
- [CVE-2026-105331](https://cve.now/CVE-2026-105331.md): mk-oracle: Local privilege escalation via malicious Oracle Instant Client (CVSS 5.2)
- [CVE-2026-90990](https://cve.now/CVE-2026-90990.md): Livestatus injection via monitoring filter values (CVSS 5.3)
- [CVE-2026-92882](https://cve.now/CVE-2026-92882.md): Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses (CVSS 2.3)
- [CVE-2026-77021](https://cve.now/CVE-2026-77021.md): Missing decompression size limit in agent receiver allows memory exhaustion via push agent data (CVSS 5.3)
- [CVE-2026-15937](https://cve.now/CVE-2026-15937.md): Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint (CVSS 5.3)
- [CVE-2026-17548](https://cve.now/CVE-2026-17548.md): Missing authorization for viewing background jobs (CVSS 5.3)
- [CVE-2026-15576](https://cve.now/CVE-2026-15576.md): Agent receiver accepts mTLS requests without a client certificate (CVSS 6.9)
- [CVE-2026-7485](https://cve.now/CVE-2026-7485.md): Frozen BI aggregations leak host and service names to unauthorized users (CVSS 2.3)
- [CVE-2026-15227](https://cve.now/CVE-2026-15227.md): Missing Authorization Allows Editing of Foreign Reports (CVSS 5.3)
- [CVE-2026-8593](https://cve.now/CVE-2026-8593.md): Fix Business Intelligence API Pack permission (CVSS 5.3)
- [CVE-2026-14852](https://cve.now/CVE-2026-14852.md): mk\_sap\_hana: Privilege escalation via crafted sapstartsrv process name (CVSS 5.2)
- [CVE-2026-9549](https://cve.now/CVE-2026-9549.md): Fix XSS in service discovery active check output (CVSS 4.8)
- [CVE-2026-8833](https://cve.now/CVE-2026-8833.md): XSS in urls (CVSS 8.5)
- [CVE-2026-8078](https://cve.now/CVE-2026-8078.md): Fix stored XSS in global settings change log (CVSS 4.8)
- [CVE-2026-7765](https://cve.now/CVE-2026-7765.md): User Messages widget leaked issuer messages on shared dashboards (CVSS 6.3)
- [CVE-2026-7186](https://cve.now/CVE-2026-7186.md): Fix stored XSS in URL dashboard widget via dangerous URI schemes (CVSS 8.5)
- [CVE-2024-47091](https://cve.now/CVE-2024-47091.md): Privilege escalation via mk\_mysql agent plugin on Windows (CVSS 5.2)
- [CVE-2026-33457](https://cve.now/CVE-2026-33457.md): Potential livestatus injection in prediction graph page (CVSS 5.3)
- [CVE-2026-33456](https://cve.now/CVE-2026-33456.md): Potential livestatus injection in notification test (CVSS 5.1)
- [CVE-2026-33455](https://cve.now/CVE-2026-33455.md): Livestatus injection in monitoring quicksearch (CVSS 5.3)
- [CVE-2025-39666](https://cve.now/CVE-2025-39666.md): omd: Local privilege escalation when executing omd commands as root (CVSS 9.3)
- [CVE-2026-3466](https://cve.now/CVE-2026-3466.md): Cross-site scripting in dashlet title (CVSS 8.5)
- [CVE-2026-24096](https://cve.now/CVE-2026-24096.md): Insufficient permission validation on multiple REST API Quick Setup endpoints (CVSS 5.3)
- [CVE-2026-20915](https://cve.now/CVE-2026-20915.md): Stored cross-site scripting in Pending Changes sidebar (CVSS 8.5)
- [CVE-2026-33276](https://cve.now/CVE-2026-33276.md): XSS in Unified Search via Unescaped Host/Service Names (CVSS 8.6)
- [CVE-2025-64998](https://cve.now/CVE-2025-64998.md): Session hijacking via exposed session signing secret in distributed Checkmk setups (CVSS 7.3)
- [CVE-2026-2859](https://cve.now/CVE-2026-2859.md): Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint (CVSS 6.3)
- [CVE-2026-24097](https://cve.now/CVE-2026-24097.md): Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint (CVSS 5.3)
- [CVE-2026-3103](https://cve.now/CVE-2026-3103.md): Deletion of passwords via RestApi (CVSS 5.3)
- [CVE-2025-64999](https://cve.now/CVE-2025-64999.md): Cross-site scripting in HTML logs of Synthetic Monitoring test services (CVSS 7.3)
- [CVE-2026-24095](https://cve.now/CVE-2026-24095.md): Missing Permission Check on Analyze Configuration Page (CVSS 5.3)
- [CVE-2025-65000](https://cve.now/CVE-2025-65000.md): Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule (CVSS 2.3)
- [CVE-2025-64997](https://cve.now/CVE-2025-64997.md): Insufficient permission validation when showing agent information (CVSS 6.3)
- [CVE-2025-58121](https://cve.now/CVE-2025-58121.md): Insufficient permission validation on multiple REST API endpoints (CVSS 5.3)
- [CVE-2025-58122](https://cve.now/CVE-2025-58122.md): Insufficient permission validation when configuring notification parameters (CVSS 5.3)
- [CVE-2025-64996](https://cve.now/CVE-2025-64996.md): Overly broad file permissions in the mk\_inotify plugin allows reading and manipulating the plugin's output (CVSS 4.8)
- [CVE-2025-39663](https://cve.now/CVE-2025-39663.md): Cross Site Scripting through compromised remote site (CVSS 8.5)
- [CVE-2025-39664](https://cve.now/CVE-2025-39664.md): Path-Traversal in report scheduler (CVSS 7.1)
- [CVE-2025-32919](https://cve.now/CVE-2025-32919.md): Privilege Escalation in Windows License plugin for Checkmk Windows Agent (CVSS 8.8)
- [CVE-2025-32916](https://cve.now/CVE-2025-32916.md): Sensitive form data in URL query parameters (CVSS 1.0)
- [CVE-2025-32918](https://cve.now/CVE-2025-32918.md): Livestatus injection in autocomplete endpoint (CVSS 5.3)
- [CVE-2025-32915](https://cve.now/CVE-2025-32915.md): Sensitive data exposed during automatic agent updates (CVSS 4.3)
- [CVE-2025-1712](https://cve.now/CVE-2025-1712.md): Arbitrary file write with vcrtrace (CVSS 8.7)
- [CVE-2025-32917](https://cve.now/CVE-2025-32917.md): Privilege escalation in jar\_signature (CVSS 5.2)
- [CVE-2025-3506](https://cve.now/CVE-2025-3506.md): Potentially senitive path exposed via unauthenticated http route (CVSS 6.3)
- [CVE-2025-2092](https://cve.now/CVE-2025-2092.md): Remote site authentication secrets written to web log (CVSS 7.1)
- [CVE-2024-38865](https://cve.now/CVE-2024-38865.md): Livestatus command injection in RestAPI (CVSS 6.0)
- [CVE-2025-2596](https://cve.now/CVE-2025-2596.md): Session logout can be overwritten by long lasting request (CVSS 2.3)
- [CVE-2025-1075](https://cve.now/CVE-2025-1075.md): LDAP credentials logged to Apache error log (CVSS 5.6)
- [CVE-2024-13722](https://cve.now/CVE-2024-13722.md): Checkmk NagVis Reflected Cross-site Scripting (CVSS 5.4)
- [CVE-2024-13723](https://cve.now/CVE-2024-13723.md): Checkmk NagVis Remote Code Execution (CVSS 7.2)
- [CVE-2024-38864](https://cve.now/CVE-2024-38864.md): User-Readable Private Key in Windows Agent (CVSS 4.8)
- [CVE-2024-47094](https://cve.now/CVE-2024-47094.md): Logging of sitesecret to automations log (CVSS 5.7)
- [CVE-2024-38863](https://cve.now/CVE-2024-38863.md): CSRF token leaked in URL parameters (CVSS 2.0)
- [CVE-2024-38862](https://cve.now/CVE-2024-38862.md): SNMP and IMPI secrets written to audit log (CVSS 5.1)
- [CVE-2024-6747](https://cve.now/CVE-2024-6747.md): Information leak in mknotifyd (CVSS 5.3)
- [CVE-2024-8606](https://cve.now/CVE-2024-8606.md): Fix 2FA bypass via RestAPI (CVSS 9.2)
- [CVE-2024-38860](https://cve.now/CVE-2024-38860.md): Reflected links in error message facilitate phishing attacks (CVSS 5.1)
- [CVE-2024-6572](https://cve.now/CVE-2024-6572.md): Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' (CVSS 6.3)
- [CVE-2024-38858](https://cve.now/CVE-2024-38858.md): Cross-site scripting in Robotmk logs view (CVSS 2.3)
- [CVE-2024-38859](https://cve.now/CVE-2024-38859.md): XSS in view page with SLA column (CVSS 4.8)
- [CVE-2024-28829](https://cve.now/CVE-2024-28829.md): Privilege escalation in mk\_informix plugin (CVSS 5.2)
- [CVE-2024-6542](https://cve.now/CVE-2024-6542.md): Livestatus injection in mknotifyd (CVSS 6.5)
- [CVE-2024-28828](https://cve.now/CVE-2024-28828.md): 1-Click compromize via CSRF (CVSS 8.8)
- [CVE-2024-28827](https://cve.now/CVE-2024-28827.md): Privilege escalation in Windows agent (CVSS 8.8)
- [CVE-2024-6163](https://cve.now/CVE-2024-6163.md): local IP restriction of internal HTTP endpoints (CVSS 5.3)
- [CVE-2024-6052](https://cve.now/CVE-2024-6052.md): XSS in SQL check parameters (CVSS 6.5)
- [CVE-2024-38857](https://cve.now/CVE-2024-38857.md): Reflected links in visuals facilitate phishing attacks (CVSS 4.3)
- [CVE-2024-28830](https://cve.now/CVE-2024-28830.md): Automation user secrets written to audit log (CVSS 2.7)
- [CVE-2024-28832](https://cve.now/CVE-2024-28832.md): XSS in Crash Report Page (CVSS 4.8)
- [CVE-2024-28831](https://cve.now/CVE-2024-28831.md): XSS in confirmation pop-up (CVSS 5.4)
- [CVE-2024-5741](https://cve.now/CVE-2024-5741.md): XSS in inventory view (CVSS 6.5)
- [CVE-2024-28833](https://cve.now/CVE-2024-28833.md): Missing brute-force protection for two factor authentication (CVSS 5.9)
- [CVE-2024-28826](https://cve.now/CVE-2024-28826.md): Unrestricted upload and download paths in check\_sftp (CVSS 8.8)
- [CVE-2024-28825](https://cve.now/CVE-2024-28825.md): Brute-force protection ineffective for some login methods (CVSS 5.9)
- [CVE-2024-3367](https://cve.now/CVE-2024-3367.md): Argument injection to runmqsc (CVSS 6.5)
- [CVE-2024-2380](https://cve.now/CVE-2024-2380.md): XSS in graph rendering (CVSS 4.6)
- [CVE-2024-28824](https://cve.now/CVE-2024-28824.md): Privilege escalation in mk\_informix plugin (CVSS 8.8)
- [CVE-2024-1742](https://cve.now/CVE-2024-1742.md): Information disclosure in mk\_oracle Checkmk agent plugin (CVSS 3.8)
- [CVE-2024-0638](https://cve.now/CVE-2024-0638.md): Privilege escalation in mk\_oracle plugins (CVSS 8.2)
- [CVE-2024-0670](https://cve.now/CVE-2024-0670.md): Privilege escalation in windows agent (CVSS 8.8)
- [CVE-2023-6740](https://cve.now/CVE-2023-6740.md): Privilege escalation in jar\_signature (CVSS 8.8)
- [CVE-2023-6735](https://cve.now/CVE-2023-6735.md): Privilege escalation in mk\_tsm (CVSS 8.8)
- [CVE-2023-31211](https://cve.now/CVE-2023-31211.md): Disabled automation users could still authenticate (CVSS 8.8)
- [CVE-2023-31210](https://cve.now/CVE-2023-31210.md): Privilege escalation in agent via LD\_LIBRARY\_PATH (CVSS 8.8)
- [CVE-2023-6287](https://cve.now/CVE-2023-6287.md): Backup password in GET parameter (CVSS 3.3)
- [CVE-2023-6251](https://cve.now/CVE-2023-6251.md): CSRF in delete\_user\_message (CVSS 3.5)
- [CVE-2023-6157](https://cve.now/CVE-2023-6157.md): Livestatus injection in ajax\_search (CVSS 7.6)
- [CVE-2023-6156](https://cve.now/CVE-2023-6156.md): Livestatus injection in availability timeline (CVSS 7.6)
- [CVE-2023-23549](https://cve.now/CVE-2023-23549.md): DoS via long hostnames (CVSS 2.7)
- [CVE-2023-31209](https://cve.now/CVE-2023-31209.md): Command injection via active checks and REST API (CVSS 8.8)
- [CVE-2023-23548](https://cve.now/CVE-2023-23548.md): XSS in business intelligence (CVSS 5.4)
- [CVE-2023-22348](https://cve.now/CVE-2023-22348.md): Reading host\_configs does not honour contact groups (CVSS 4.3)
- [CVE-2023-31208](https://cve.now/CVE-2023-31208.md): Livestatus command injection in RestAPI (CVSS 8.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/checkmk
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.