Vulnerabilidades en Checkmk GmbH
98 resultadosCVE-2026-33457MEDIUMPotential livestatus injection in prediction graph pageEPSS 0.2%CVE-2024-28827HIGHPrivilege escalation in Windows agentEPSS 0.2%CVE-2025-64999HIGHCross-site scripting in HTML logs of Synthetic Monitoring test servicesEPSS 0.2%CVE-2026-20915HIGHStored cross-site scripting in Pending Changes sidebarEPSS 0.2%CVE-2026-33276HIGHXSS in Unified Search via Unescaped Host/Service NamesEPSS 0.1%CVE-2026-8078MEDIUMFix stored XSS in global settings change logEPSS 0.1%CVE-2026-9549MEDIUMFix XSS in service discovery active check outputEPSS 0.1%CVE-2025-32915MEDIUMSensitive data exposed during automatic agent updatesEPSS 0.1%CVE-2026-8833HIGHXSS in urlsEPSS 0.1%CVE-2026-7186HIGHFix stored XSS in URL dashboard widget via dangerous URI schemesEPSS 0.1%CVE-2025-39666CRITICALomd: Local privilege escalation when executing omd commands as rootEPSS 0.1%CVE-2026-113461MEDIUMmk-oracle: Local privilege escalation via insecure Oracle Home library loadingEPSS 0.1%CVE-2024-47091MEDIUMPrivilege escalation via mk_mysql agent plugin on WindowsEPSS 0.1%CVE-2025-64996MEDIUMOverly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's outputEPSS 0.1%CVE-2026-103682LOWJolokia special agent exposes password in process listEPSS 0.1%CVE-2026-103674LOWNetApp ONTAP special agent exposes password in process listEPSS 0.1%CVE-2026-105331MEDIUMmk-oracle: Local privilege escalation via malicious Oracle Instant ClientEPSS 0.1%CVE-2026-111573MEDIUMPrivilege escalation via unprotected Windows agent data folderEPSS —