Lucene search
+L

10 matches found

NVD
NVD
•added 2026/02/09 4:16 p.m.•23 views

CVE-2026-24095

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS0.00267EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/09 4:16 p.m.•16 views

UBUNTU-CVE-2026-24095

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/02/09 4:16 p.m.•13 views

CVE-2026-24095

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.9AI score0.00267EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/09 3:29 p.m.•11 views

CVE-2026-24095 Missing Permission Check on Analyze Configuration Page

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/09 3:29 p.m.•10 views

CVE-2026-24095

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.6AI score0.00267EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/09 3:29 p.m.•47 views

CVE-2026-24095 Missing Permission Check on Analyze Configuration Page

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/09 3:29 p.m.•34 views

CVE-2026-24095

CVE-2026-24095 affects Checkmk: improper permission enforcement allows users with the Use WATO permission to directly access the Analyze configuration page, bypassing Access analyze configuration. If such users also hold Make changes, perform actions, they can disable checks or acknowledge result...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•23 views

PT-2026-7118

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.6AI score0.00267EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•3 views

CVE-2026-24095: Missing Authorization

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permissio...

5.3CVSS5.7AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•28 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.4.0p21, 2.3.0p43, and 2.2.0 contain security vulnerabilities. These vulnerabilities stem from improper permission execution, which may allow users with the "Use WATO" permission to bypass...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder