Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 7:22 a.m.2 views

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

7.6CVSS5.9AI score0.00047EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 9:31 a.m.2 views

EUVD-2026-21344

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS5.9AI score0.00047EPSS
Exploits0References2
NVD
NVD
added 2026/04/10 9:16 a.m.1 views

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

7.6CVSS0.00047EPSS
Exploits0References1
OSV
OSV
added 2026/04/10 9:16 a.m.2 views

UBUNTU-CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

7.6CVSS5.9AI score0.00047EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/10 8:31 a.m.0 views

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS5.9AI score0.00047EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/10 8:31 a.m.1 views

CVE-2026-33456 Potential livestatus injection in notification test

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS5.9AI score0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/10 8:31 a.m.25 views

CVE-2026-33456 Potential livestatus injection in notification test

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS0.00047EPSS
Exploits0References1
CVE
CVE
added 2026/04/10 8:31 a.m.5 views

CVE-2026-33456

Summary of CVE-2026-33456 : A Livestatus injection vulnerability exists in Checkmk’s notification test mode for versions before 2.5.0b4 and before 2.4.0p26. An authenticated user who can access the notification test page can inject arbitrary Livestatus commands via a crafted service description. ...

7.6CVSS5.9AI score0.00047EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.1 views

PT-2026-31899

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0b4 and prior to 2.4.0p26 Description A flaw exists in Checkmk that allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands through a crafted service...

5.1CVSS5.9AI score0.00047EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/04/10 12:0 a.m.1 views

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

7.6CVSS5.9AI score0.00047EPSS
Exploits0References2
NVD
NVD
added 2026/04/02 7:21 p.m.1 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS0.00058EPSS
Exploits1References3
EUVD
EUVD
added 2026/04/02 6:49 p.m.2 views

EUVD-2026-18511

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.8AI score0.00058EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/02 6:49 p.m.0 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.8AI score0.00058EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/30 12:0 a.m.2 views

PT-2024-38948 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a test case and not a valid exploit notification. No general information...

6.3AI score
Exploits0References3
Rows per page
Query Builder