Skip to content
OpenAdvisories
High WID-SEC-2026-0983 2 CVEs

Checkmk: Mehrere Schwachstellen

Published Apr 6, 2026 · Updated Apr 7, 2026 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um seine Privilegien zu erhöhen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • Critical 9.3
    CVE-2025-39666

    omd: Local privilege escalation when executing omd commands as root

    Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escalate their privileges to root, by manipulating files in the site context that ar…

    Checkmk Checkmk check-mk Ubuntu
  • High 8.5
    CVE-2026-3466

    Cross-site scripting in dashlet title

    Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cros…

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-209262, EUVD-2026-19605

  2. #1

    Initiale Fassung

References