Skip to content
OpenAdvisories
High WID-SEC-2026-4453 3 CVEs

Checkmk: Mehrere Schwachstellen ermöglichen Codeausführung

Published Nov 10, 2026 · Updated Nov 11, 2026 · Revision 2 · de

Vendor: Checkmk Product: Checkmk Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um beliebigen Programmcode auszuführen und Dateien zu manipulieren.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • Critical 9.4
    CVE-2026-118965

    Path traversal in host label synchronization allows code execution on the central site from a remote site

    Path traversal in the discovered host label synchronization in Checkmk <2.5.0p19, <2.4.0p40 and 2.3.0 (EOL) allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code …

    Checkmk Checkmk
  • Critical 9.4
    CVE-2026-120495

    Arbitrary file write and code execution via crafted Synthetic Monitoring agent data

    Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the co…

    Checkmk Checkmk
  • Critical 9.4
    CVE-2026-121374

    Arbitrary file write and code execution via excluded node roles in Kubernetes special agent

    Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in th…

    Checkmk Checkmk

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-123350, EUVD-2026-123351

  2. #1

    Initiale Fassung

References