WID-SEC-W-2026-1406

DeutschShown in its original language — a full translation is planned for a future version.

Checkmk: Schwachstelle ermöglicht Privilegieneskalation und Ausführen von beliebigem Programmcode mit Administratorrechten

view advisory published 2026-05-06

Ein lokaler Angreifer kann eine Schwachstelle in Checkmk ausnutzen, um seine Privilegien zu erhöhen, und um beliebigen Programmcode mit Administratorrechten auszuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-47091US	high7.8	0.12% (2nd)	—	2026-05-13
Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whos…

references

External citations — patches, advisories, analysis.

CheckMK Werk 19198 vom 2026-05-06external
WID-SEC-W-2026-1406 - CSAF Versionself
WID-SEC-2026-1406 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan