Checkmk records

108 published records for vendor checkmk.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 75.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

108 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-28825No exploit	Brute-force protection ineffective for some login methodscheckmk · checkmk · CWE-307 Pre-auth	Critical9.8	—	0.5%	Apr 24, 2024
39Monitor	CVE-2022-48317No exploit	Insecure Termination of RestAPI Session Tokenscheckmk · checkmk · CWE-613 Pre-auth	Critical9.8	—	0.5%	Feb 20, 2023
37Monitor	CVE-2025-39666No exploit	omd: Local privilege escalation when executing omd commands as rootcheckmk · checkmk · CWE-426 Local privilege escalation	Critical9.3	—	0.1%	Apr 7, 2026
36Monitor	CVE-2021-40904Proof of concept	The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by checkmk · checkmk · CWE-276 pre-auth RCE	High8.8	—	3.7%	Mar 25, 2022
36Monitor	CVE-2021-40905Proof of concept	The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" filecheckmk · checkmk · CWE-434 pre-auth RCE File upload	High8.8	—	3.0%	Mar 25, 2022
36Monitor	CVE-2024-8606No exploit	Fix 2FA bypass via RestAPIcheckmk · checkmk · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.5%	Sep 23, 2024
35Monitor	CVE-2022-46836No exploit	PHP code injection in watolibcheckmk · checkmk · CWE-20 RCE	High8.8	—	1.1%	Feb 20, 2023
35Monitor	CVE-2023-31209No exploit	Command injection via active checks and REST APIcheckmk · checkmk · CWE-78 RCE Command injection	High8.8	—	1.1%	Aug 10, 2023
35Monitor	CVE-2023-31208No exploit	Livestatus command injection in RestAPIcheckmk · checkmk · CWE-140 RCE Command injection	High8.8	—	1.0%	May 17, 2023
35Monitor	CVE-2023-6157No exploit	Livestatus injection in ajax_searchcheckmk · checkmk · CWE-140 RCE	High8.8	—	0.9%	Nov 22, 2023
35Monitor	CVE-2023-6156No exploit	Livestatus injection in availability timelinecheckmk · checkmk · CWE-140 RCE	High8.8	—	0.9%	Nov 22, 2023
35Monitor	CVE-2022-46302No exploit	Remote Code Execution with Root Privileges via Broad Apache Permissionscheckmk · checkmk · CWE-829 RCE Local privilege escalation	High8.8	—	0.4%	Apr 20, 2023
35Monitor	CVE-2025-32919No exploit	Privilege Escalation in Windows License plugin for Checkmk Windows Agentcheckmk · checkmk · CWE-427 Local privilege escalation	High8.8	—	0.3%	Oct 9, 2025
35Monitor	CVE-2024-28828No exploit	1-Click compromize via CSRFcheckmk · checkmk · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jul 10, 2024
34Monitor	CVE-2025-1712No exploit	Arbitrary file write with vcrtracecheckmk · checkmk · CWE-88	High8.7	—	0.8%	May 21, 2025
34Monitor	CVE-2025-39663No exploit	Cross Site Scripting through compromised remote sitecheckmk · checkmk · CWE-80 XSS	High8.5	—	0.6%	Oct 30, 2025
34Monitor	CVE-2026-3466No exploit	Cross-site scripting in dashlet titlecheckmk · checkmk · CWE-79 XSS	High8.5	—	0.3%	Apr 7, 2026
34Monitor	CVE-2026-8833No exploit	Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 vcheckmk · checkmk · CWE-79 XSS	High8.5	—	0.2%	Jun 8, 2026
34Monitor	CVE-2026-33276No exploit	XSS in Unified Search via Unescaped Host/Service Namescheckmk · checkmk · CWE-79 RCE XSS	High8.6	—	0.2%	Mar 31, 2026
34Monitor	CVE-2026-7186No exploit	Fix stored XSS in URL dashboard widget via dangerous URI schemescheckmk · checkmk · CWE-79 XSS	High8.5	—	0.2%	Jun 8, 2026
34Monitor	CVE-2026-20915No exploit	Stored cross-site scripting in Pending Changes sidebarcheckmk · checkmk · CWE-79 XSS	High8.5	—	0.1%	Mar 31, 2026
32Monitor	CVE-2023-0284No exploit	Improper validation of LDAP user IDscheckmk · checkmk · CWE-20	High8.1	—	0.9%	Jan 26, 2023
32Monitor	CVE-2024-28826No exploit	Unrestricted upload and download paths in check_sftpcheckmk · checkmk · CWE-73 Path traversal File upload	High8.1	—	0.5%	May 29, 2024
31Monitor	CVE-2023-31210No exploit	Privilege escalation in agent via LD_LIBRARY_PATHcheckmk · checkmk · CWE-427 Local privilege escalation	High7.8	—	0.5%	Dec 13, 2023
31Monitor	CVE-2022-47909No exploit	LQL Injection in Livestatus HTTP headerscheckmk · checkmk · CWE-20	High7.8	—	0.4%	Feb 20, 2023

CVE-2024-28825
39Monitor
Brute-force protection ineffective for some login methods
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
checkmk · checkmkApr 24, 2024
CVE-2022-48317
39Monitor
Insecure Termination of RestAPI Session Tokens
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
checkmk · checkmkFeb 20, 2023
CVE-2025-39666
37Monitor
omd: Local privilege escalation when executing omd commands as root
CriticalCVSS 9.3No exploitEPSS 0%
- Local privilege escalation
checkmk · checkmkApr 7, 2026
CVE-2021-40904
36Monitor
The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by
HighCVSS 8.8Proof of conceptEPSS 4%
- pre-auth RCE
checkmk · checkmkMar 25, 2022
CVE-2021-40905
36Monitor
The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" file
HighCVSS 8.8Proof of conceptEPSS 3%
- pre-auth RCE
- File upload
checkmk · checkmkMar 25, 2022
CVE-2024-8606
36Monitor
Fix 2FA bypass via RestAPI
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
checkmk · checkmkSep 23, 2024
CVE-2022-46836
35Monitor
PHP code injection in watolib
HighCVSS 8.8No exploitEPSS 1%
- RCE
checkmk · checkmkFeb 20, 2023
CVE-2023-31209
35Monitor
Command injection via active checks and REST API
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
checkmk · checkmkAug 10, 2023
CVE-2023-31208
35Monitor
Livestatus command injection in RestAPI
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
checkmk · checkmkMay 17, 2023
CVE-2023-6157
35Monitor
Livestatus injection in ajax_search
HighCVSS 8.8No exploitEPSS 1%
- RCE
checkmk · checkmkNov 22, 2023
CVE-2023-6156
35Monitor
Livestatus injection in availability timeline
HighCVSS 8.8No exploitEPSS 1%
- RCE
checkmk · checkmkNov 22, 2023
CVE-2022-46302
35Monitor
Remote Code Execution with Root Privileges via Broad Apache Permissions
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
checkmk · checkmkApr 20, 2023
CVE-2025-32919
35Monitor
Privilege Escalation in Windows License plugin for Checkmk Windows Agent
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
checkmk · checkmkOct 9, 2025
CVE-2024-28828
35Monitor
1-Click compromize via CSRF
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
checkmk · checkmkJul 10, 2024
CVE-2025-1712
34Monitor
Arbitrary file write with vcrtrace
HighCVSS 8.7No exploitEPSS 1%
checkmk · checkmkMay 21, 2025
CVE-2025-39663
34Monitor
Cross Site Scripting through compromised remote site
HighCVSS 8.5No exploitEPSS 1%
- XSS
checkmk · checkmkOct 30, 2025
CVE-2026-3466
34Monitor
Cross-site scripting in dashlet title
HighCVSS 8.5No exploitEPSS 0%
- XSS
checkmk · checkmkApr 7, 2026
CVE-2026-8833
34Monitor
Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 v
HighCVSS 8.5No exploitEPSS 0%
- XSS
checkmk · checkmkJun 8, 2026
CVE-2026-33276
34Monitor
XSS in Unified Search via Unescaped Host/Service Names
HighCVSS 8.6No exploitEPSS 0%
- RCE
- XSS
checkmk · checkmkMar 31, 2026
CVE-2026-7186
34Monitor
Fix stored XSS in URL dashboard widget via dangerous URI schemes
HighCVSS 8.5No exploitEPSS 0%
- XSS
checkmk · checkmkJun 8, 2026
CVE-2026-20915
34Monitor
Stored cross-site scripting in Pending Changes sidebar
HighCVSS 8.5No exploitEPSS 0%
- XSS
checkmk · checkmkMar 31, 2026
CVE-2023-0284
32Monitor
Improper validation of LDAP user IDs
HighCVSS 8.1No exploitEPSS 1%
checkmk · checkmkJan 26, 2023
CVE-2024-28826
32Monitor
Unrestricted upload and download paths in check_sftp
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
- File upload
checkmk · checkmkMay 29, 2024
CVE-2023-31210
31Monitor
Privilege escalation in agent via LD_LIBRARY_PATH
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
checkmk · checkmkDec 13, 2023
CVE-2022-47909
31Monitor
LQL Injection in Livestatus HTTP headers
HighCVSS 7.8No exploitEPSS 0%
checkmk · checkmkFeb 20, 2023