CVE-2026-7485lowCWE-863

CVE-2026-7485: low-severity vulnerability in Checkmk

Frozen BI aggregations leak host and service names to unauthorized users

Published · Updated

Follow this CVE+ Monitor Checkmk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.3epss 0.4%
Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Checkmk GmbH · Checkmk
Related CVEs — Checkmk

In the same product, most dangerous first.

CVE-2023-31209HIGHCommand injection via active checks and REST APIEPSS 1.1%CVE-2023-31208HIGHLivestatus command injection in RestAPIEPSS 1.0%CVE-2023-6157HIGHLivestatus injection in ajax_searchEPSS 0.9%CVE-2024-38865MEDIUMLivestatus command injection in RestAPIEPSS 0.9%CVE-2023-6156HIGHLivestatus injection in availability timelineEPSS 0.9%CVE-2025-1712HIGHArbitrary file write with vcrtraceEPSS 0.8%