Skip to content
OpenAdvisories
Medium WID-SEC-2026-2567 2 CVEs

Checkmk: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Jul 28, 2026 · Updated Sep 6, 2026 · Revision 4 · de-DE

Vendor: Checkmk Product: Checkmk

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • Medium 6.9
    CVE-2026-15576

    Agent receiver accepts mTLS requests without a client certificate

    Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in lim…

    Checkmk Checkmk check-mk Ubuntu
  • Medium 5.3
    CVE-2026-15937

    Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

    Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that…

    Checkmk Checkmk

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-70973, GHSA-P53J-VWHV-XP3W

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-63903

  3. #2

    CVE angepasst

  4. #1

    Initiale Fassung

References