WID-SEC-W-2026-3746

DeutschShown in its original language — a full translation is planned for a future version.

Checkmk: Mehrere Schwachstellen

view advisory published 2026-10-05

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-14452US	—	0.29% (22nd)	—	2026-10-16
Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script…
CVE-2026-92882US	—	0.35% (29th)	—	2026-09-22
Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticat…
CVE-2026-92878US	—	—	—	—

references

External citations — patches, advisories, analysis.

CheckMK Werk 19372 vom 2026-10-05external
CheckMK Werk 20077 vom 2026-10-05external
CheckMK Werk 22314 vom 2026-10-05external
WID-SEC-W-2026-3746 - CSAF Versionself
WID-SEC-2026-3746 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan