Skip to content
OpenAdvisories
High WID-SEC-2026-3746 2 CVEs

Checkmk: Mehrere Schwachstellen

Published Oct 5, 2026 · Updated Oct 18, 2026 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • High 8.6
    CVE-2026-14452

    Open redirect and XSS via reset_url parameter

    Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redirect that…

    Checkmk Checkmk
  • Low 2.3
    CVE-2026-92882

    Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

    Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticated user who may view a host's configuration to read stored SNMP community strin…

    Checkmk Checkmk

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-102834

  2. #1

    Initiale Fassung

References