Skip to content
OpenAdvisories
High WID-SEC-2026-0928 2 CVEs

Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Mar 30, 2026 · Updated Mar 31, 2026 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • High 8.6
    CVE-2026-33276

    XSS in Unified Search via Unescaped Host/Service Names

    Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search feature.

    Checkmk Checkmk check-mk Ubuntu
  • High 8.5
    CVE-2026-20915

    Stored cross-site scripting in Pending Changes sidebar

    Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other …

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-17417, EUVD-2026-17429

  2. #1

    Initiale Fassung

References