CVE-2026-3466 Cross-site scripting in dashlet title

Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 EOL, Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 beta before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cross-site scripting XSS attacks by tricking a...

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet...

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet...

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet...

CVE-2024-33775

Nagios XI version 2024R1.01 is vulnerable to a privilege escalation flaw in the Autodiscover component . A remote attacker can exploit this by providing a crafted Dashlet to gain full root access on the target system. Proof-of-concept exploits exist, demonstrating that an attacker can achieve roo...

PT-2024-25473

Name of the Vulnerable Software and Affected Versions Nagios XI version 2024R1.01 Description An issue with the Autodiscover component in Nagios XI allows a remote attacker to escalate privileges via a crafted Dashlet. Recommendations For Nagios XI version 2024R1.01, consider disabling the...