CVE-2026-90990: Improper Neutralization of CRLF Sequences

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk 2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services...

PT-2026-96699

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p14 Description Improper neutralization of newlines in filter values within the monitoring host and service list APIs allows an authenticated user to inject additional Livestatus query headers. This can lead to t...

PT-2026-96700

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p15 Checkmk versions prior to 2.4.0p37 Checkmk versions prior to 2.3.0p51 Checkmk version 2.2.0 Description Insufficiently protected credentials in the host and folder configuration endpoints of the REST API allo...

CVE-2026-77021

Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...

CVE-2026-77021

Checkmk versions prior to 2.5.0p14 , 2.4.0p37 , and 2.3.0p51 , as well as the EOL 2.2.0 release, are affected by a data amplification vulnerability in the agent receiver. The root cause is a missing decompression size limit on zlib-compressed data sent by hosts registered in push mode. An attacke...

CVE-2026-77021 Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...

EUVD-2026-83883

Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...

CVE-2026-77021 Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...

CVE-2026-77021: Improper Handling of Highly Compressed Data (Data Amplification)

Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...

PT-2026-96071

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p14 Checkmk versions prior to 2.4.0p37 Checkmk versions prior to 2.3.0p51 Checkmk version 2.2.0 Description Improper handling of highly compressed data, known as data amplification, allows an attacker controlling...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - Escalada de Privilegios en la Reparación MSI del Agente CheckMK NanoCorp HTB Este repositorio contiene un script de PowerShell utilizado para explotar CVE-2024-0670 en la máquina NanoCorp de Hack The Box. La vulnerabilidad permite a un usuario con pocos privilegios abusar de la...

CVE-2026-15937

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

EUVD-2026-70973

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-15937

Checkmk versions prior to 2.5.0p10 contain an improper certificate validation flaw in agent receiver endpoints . The endpoints fail to verify that a presented mTLS certificate was issued by their own root certificate. As a result, a relay and a push agent that share the same UUID can reuse each o...

CVE-2026-15937 Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-15937 Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

PT-2026-85434

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-15937: Improper Certificate Validation

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

Linux Distros Unpatched Vulnerability : CVE-2026-15576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification...

Linux Distros Unpatched Vulnerability : CVE-2026-17548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view...