7.6

CVE-2026-33456

Potential livestatus injection in notification test

Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkmk ≫ Checkmk Version 2.4.0 Update -
Checkmk ≫ Checkmk Version 2.4.0 Update b1
Checkmk ≫ Checkmk Version 2.4.0 Update b2
Checkmk ≫ Checkmk Version 2.4.0 Update b3
Checkmk ≫ Checkmk Version 2.4.0 Update b4
Checkmk ≫ Checkmk Version 2.4.0 Update b5
Checkmk ≫ Checkmk Version 2.4.0 Update b6
Checkmk ≫ Checkmk Version 2.4.0 Update p1
Checkmk ≫ Checkmk Version 2.4.0 Update p10
Checkmk ≫ Checkmk Version 2.4.0 Update p11
Checkmk ≫ Checkmk Version 2.4.0 Update p12
Checkmk ≫ Checkmk Version 2.4.0 Update p13
Checkmk ≫ Checkmk Version 2.4.0 Update p14
Checkmk ≫ Checkmk Version 2.4.0 Update p15
Checkmk ≫ Checkmk Version 2.4.0 Update p16
Checkmk ≫ Checkmk Version 2.4.0 Update p17
Checkmk ≫ Checkmk Version 2.4.0 Update p18
Checkmk ≫ Checkmk Version 2.4.0 Update p19
Checkmk ≫ Checkmk Version 2.4.0 Update p2
Checkmk ≫ Checkmk Version 2.4.0 Update p20
Checkmk ≫ Checkmk Version 2.4.0 Update p21
Checkmk ≫ Checkmk Version 2.4.0 Update p22
Checkmk ≫ Checkmk Version 2.4.0 Update p23
Checkmk ≫ Checkmk Version 2.4.0 Update p24
Checkmk ≫ Checkmk Version 2.4.0 Update p25
Checkmk ≫ Checkmk Version 2.4.0 Update p3
Checkmk ≫ Checkmk Version 2.4.0 Update p4
Checkmk ≫ Checkmk Version 2.4.0 Update p5
Checkmk ≫ Checkmk Version 2.4.0 Update p6
Checkmk ≫ Checkmk Version 2.4.0 Update p7
Checkmk ≫ Checkmk Version 2.4.0 Update p8
Checkmk ≫ Checkmk Version 2.4.0 Update p9
Checkmk ≫ Checkmk Version 2.5.0 Update b1
Checkmk ≫ Checkmk Version 2.5.0 Update b2
Checkmk ≫ Checkmk Version 2.5.0 Update b3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.094
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 2.8 4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
security@checkmk.com 5.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-140 Improper Neutralization of Delimiters

The product does not neutralize or incorrectly neutralizes delimiters.

https://checkmk.com/werk/17989
Vendor Advisory