Skip to content
OpenAdvisories
Medium WID-SEC-2026-1050 3 CVEs

Checkmk: Mehrere Schwachstellen

Published Apr 9, 2026 · Updated Apr 9, 2026 · de-DE

Vendor: Checkmk Product: Checkmk

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, nicht näher spezifizierte Auswirkungen zu erzielen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • Medium 5.3
    CVE-2026-33455

    Livestatus injection in monitoring quicksearch

    Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

    Checkmk Checkmk check-mk Ubuntu
  • Medium 5.3
    CVE-2026-33457

    Potential livestatus injection in prediction graph page

    Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service descripti…

    Checkmk Checkmk check-mk Ubuntu
  • Medium 5.1
    CVE-2026-33456

    Potential livestatus injection in notification test

    Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #1

    Initiale Fassung

References