Skip to content
OpenAdvisories
Medium WID-SEC-2026-0606 2 CVEs

Checkmk: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Mar 4, 2026 · Updated Mar 15, 2026 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Informationen offenzulegen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • Medium 6.3
    CVE-2026-2859

    Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint

    Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observing different HTTP response codes in deploy_agent endpoint, which could lead to…

    Checkmk Checkmk check-mk Ubuntu
  • Medium 5.3
    CVE-2026-24097

    Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint

    Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, w…

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-11784, EUVD-2026-11782

  2. #1

    Initiale Fassung

References