Checkmk Checkmk

Name: Checkmk Checkmk
Brand: Checkmk

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical19high33medium2low

updated 2026-10-27

vulnerabilities (78)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-109619US	high8.1	100.0% (100th)	Exploit	2.5.0p17	2026-10-21	3 versions
CVE-2026-109618US	critical9.8	100.0% (100th)	Exploit	2.5.0p17	2026-10-21	3 versions
CVE-2024-13723US	—	1.28% (70th)	—	2.2.0p31	2025-02-04	5 versions
CVE-2024-38865US	high8.8	0.88% (59th)	—	2.4.0b1	2025-04-10	4 versions
CVE-2025-1712US	high8.8	0.83% (57th)	—	2.3.0p32	2025-05-21	4 versions
CVE-2025-39664US	medium6.5	0.69% (53rd)	—	2.3.0p38	2025-10-09	3 versions
CVE-2025-39663US	high8.4	0.60% (49th)	—	2.4.0p14	2025-10-30	2 versions
CVE-2024-13722US	—	0.58% (47th)	—	2.2.0p31	2025-02-04	5 versions
CVE-2024-8606US	high8.8OT elevated	0.46% (40th)	—	2.3.0p16	2024-09-23	< 2.3.0p16
CVE-2026-15576US	—OT elevated	0.45% (39th)	—	2.5.0p10	2026-08-21	2 versions
CVE-2024-38859US	medium6.1	0.45% (39th)	—	2.3.0p14	2024-08-26	4 versions
CVE-2024-38866US	high7.5	0.42% (36th)	—	2.3.0p33	2025-05-27	4 versions
CVE-2026-90990US	—	0.42% (36th)	—	2.4.0p37	2026-09-22	4 versions
CVE-2024-38863US	high7.5	0.42% (36th)	—	2.4.0b1	2024-10-14	4 versions
CVE-2025-32918US	high8.8	0.39% (33rd)	—	2.4.0p6	2025-07-04	3 versions
CVE-2026-77021US	—	0.38% (32nd)	—	2.5.0p12	2026-09-21	< 2.5.0p12
CVE-2024-6747US	high7.5	0.38% (32nd)	—	2.3.0p18	2024-10-10	2 versions
CVE-2026-92882US	—	0.35% (28th)	—	2.5.0p15	2026-09-22	4 versions
CVE-2026-7485US	—OT elevated	0.35% (28th)	—	2.3.0p47	2026-08-20	4 versions
CVE-2026-15227US	—OT elevated	0.35% (28th)	—	2.5.0p10	2026-07-31	4 versions
CVE-2026-8593US	—OT elevated	0.35% (28th)	—	2.3.0p49	2026-07-21	4 versions
CVE-2025-64998US	high7.2	0.35% (28th)	—	2.4.0p23	2026-03-24	2 versions
CVE-2024-6572US	—	0.34% (27th)	—	2.3.0p14	2024-09-09	2 versions
CVE-2024-38858US	medium6.1	0.33% (26th)	—	2.3.0p14	2024-09-02	2 versions
CVE-2024-38860US	medium6.1	0.33% (26th)	—	2.4.0b1	2024-09-17	3 versions
CVE-2025-3506US	medium5.3	0.32% (25th)	—	2.4.0b6	2025-05-08	2 versions
CVE-2024-38862US	medium4.4	0.32% (25th)	—	2.2.0p35	2024-10-14	4 versions
CVE-2025-1075US	high7.5	0.32% (24th)	—	2.3.0p27	2025-02-19	4 versions
CVE-2024-3367US	medium5.5	0.31% (24th)	—	2.3.0b5	2024-04-16	2 versions
CVE-2025-32917US	high8.8	0.31% (24th)	—	2.2.0p42	2025-05-13	4 versions
CVE-2025-2092US	high7.5	0.30% (23rd)	—	2.2.0p41	2025-04-22	4 versions
CVE-2026-14452US	—	0.29% (22nd)	—	3.0.0b1	2026-10-16	4 versions
CVE-2025-32919US	high7.8	0.27% (19th)	—	2.4.0p13	2025-10-09	3 versions
CVE-2026-24095US	—OT elevated	0.27% (19th)	—	2.3.0.p43	2026-02-09	2 versions
CVE-2025-39665US	medium5.3	0.26% (17th)	—	2.4.0p18	2025-12-03	3 versions
CVE-2024-1742US	low3.3	0.25% (16th)	—	2.2.0p24	2024-03-22	2 versions
CVE-2026-24097US	medium4.3	0.25% (16th)	—	2.5.0b1	2026-03-13	4 versions
CVE-2025-64997US	medium6.5	0.24% (15th)	—	2.4.0p17	2025-12-18	3 versions
CVE-2026-24096US	high8.8	0.24% (14th)	—	2.6.0b1	2026-04-01	3 versions
CVE-2024-47090US	medium6.1	0.23% (14th)	—	2.4.0p3	2025-05-27	4 versions
CVE-2026-3466US	medium5.4	0.23% (14th)	—	2.3.0p46	2026-04-07	4 versions
CVE-2026-15937US	—	0.23% (13th)	—	3.0.0b1	2026-09-04	2 versions
CVE-2025-65000US	medium5.3	0.22% (12th)	—	2.3.0p42	2025-12-18	3 versions
CVE-2025-58121US	medium5.4	0.21% (12th)	—	2.4.0p16	2025-11-18	3 versions
CVE-2024-47094US	medium5.5	0.21% (12th)	—	2.2.0p37	2024-11-29	3 versions
CVE-2025-2596US	medium5.3	0.21% (11th)	—	2.5.0b1	2025-03-26	4 versions
CVE-2026-2859US	medium4.3	0.20% (9th)	—	2.5.0b1	2026-03-13	4 versions
CVE-2026-33456US	high7.6	0.20% (9th)	—	2.5.0b4	2026-04-10	4 versions
CVE-2024-0638US	medium6.7	0.20% (9th)	—	2.1.0p41	2024-03-22	2 versions
CVE-2025-32916US	medium4.3	0.19% (9th)	—	2.4.0p13	2025-10-09	3 versions

showing 50 of 78

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-140Improper Neutralization of Delimiters6 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges4 CVEs
CWE-532Insertion of Sensitive Information into Log File4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-426Untrusted Search Path3 CVEs
CWE-427Uncontrolled Search Path Element3 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)78 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan