# Checkmk vulnerabilities Source: https://junglewise.ai/threats/technologies/checkmk Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 12:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/checkmk.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 34 vulnerabilities in Checkmk: 6 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121374, was published on 11 November 2026. 6 vulnerabilities in the last four weeks, up 200% on the four before (2). ## Counts - Last 7 days: 6 - Last 30 days: 9 - Last 90 days: 14 - All time: 34 (0 critical, 0 exploited in the wild) ## About Checkmk Open-source monitoring software for IT infrastructure and application performance. ## Latest Checkmk vulnerabilities - [CVE-2026-121374: Checkmk Kubernetes special agent argument injection](https://junglewise.ai/threats/cve-2026-121374-argument-injection-in-the-kubernetes-special-agent-in-checkmk-2) (info, published 11 Nov 2026) - [CVE-2026-120495: Checkmk Robotmk path traversal in HTML log](https://junglewise.ai/threats/cve-2026-120495-path-traversal-in-the-synthetic-monitoring-robotmk-test-service) (info, published 11 Nov 2026) - [CVE-2026-118965: Checkmk path traversal in remote site label synchronization](https://junglewise.ai/threats/cve-2026-118965-path-traversal-in-the-discovered-host-label-synchronization-in) (info, published 11 Nov 2026) - [CVE-2026-111573: Checkmk Windows agent privilege escalation via unprotected data directory](https://junglewise.ai/threats/cve-2026-111573-incorrect-permissions-on-the-checkmk-windows-agent-s-data) (info, published 6 Nov 2026) - [CVE-2026-103682: Checkmk Jolokia agent password exposure in process list](https://junglewise.ai/threats/cve-2026-103682-invocation-of-the-jolokia-special-agent-with-the-login-password) (info, published 6 Nov 2026) - [CVE-2026-103674: Checkmk NetApp ONTAP password exposure in process list](https://junglewise.ai/threats/cve-2026-103674-invocation-of-the-netapp-ontap-special-agent-with-the-login) (info, published 6 Nov 2026) - [CVE-2026-117611: Checkmk improper certificate validation in CA store](https://junglewise.ai/threats/cve-2026-117611-improper-certificate-validation-in-checkmk-2-5-0p18-2-4-0p39-2-3) (info, published 29 Oct 2026) - [CVE-2026-113461: Checkmk mk-oracle local privilege escalation via unsafe Oracle home loading](https://junglewise.ai/threats/cve-2026-113461-local-privilege-escalation-in-checkmk-2-5-0p14-allows-a-local) (info, published 21 Oct 2026) - [CVE-2026-14452: Checkmk Setup search parameter open redirect and XSS](https://junglewise.ai/threats/cve-2026-14452-improper-validation-of-the-reset-url-parameter-of-the-setup-in) (info, published 16 Oct 2026) - [CVE-2026-92882: Checkmk REST API credential exposure in host configuration](https://junglewise.ai/threats/cve-2026-92882-insufficiently-protected-credentials-in-the-host-and-folder) (info, published 22 Sep 2026) - [CVE-2026-90990: Checkmk Livestatus injection in monitoring filter values](https://junglewise.ai/threats/cve-2026-90990-improper-neutralization-of-newlines-in-filter-values-in-the) (info, published 22 Sep 2026) - [CVE-2026-15937: Checkmk improper certificate validation in agent receiver](https://junglewise.ai/threats/cve-2026-15937-checkmk-improper-certificate-validation-in-agent-receiver) (info, CVSS 5.3, published 4 Sep 2026) - [CVE-2026-17548: Checkmk missing authorization in background job viewing](https://junglewise.ai/threats/cve-2026-17548-checkmk-missing-authorization-in-background-job-viewing) (info, CVSS 5.3, published 25 Aug 2026) - [CVE-2026-7485: Checkmk incorrect authorization in frozen BI aggregations](https://junglewise.ai/threats/cve-2026-7485-checkmk-incorrect-authorization-in-frozen-bi-aggregations) (info, CVSS 2.3, published 20 Aug 2026) - [CVE-2026-15227: Checkmk missing authorization in reporting component](https://junglewise.ai/threats/cve-2026-15227-checkmk-missing-authorization-in-reporting-component) (info, CVSS 5.3, published 31 Jul 2026) - [CVE-2026-8593: Checkmk improper permission enforcement in Business Intelligence API](https://junglewise.ai/threats/cve-2026-8593-checkmk-improper-permission-enforcement-in-business-intelligence) (info, CVSS 5.3, published 21 Jul 2026) - [CVE-2026-14852: Checkmk privilege escalation in mk_sap_hana agent plugin](https://junglewise.ai/threats/cve-2026-14852-checkmk-privilege-escalation-in-mk-sap-hana-agent-plugin) (info, CVSS 5.2, published 14 Jul 2026) - [CVE-2026-9549: Checkmk stored XSS in service discovery active check output](https://junglewise.ai/threats/cve-2026-9549-checkmk-stored-xss-in-service-discovery-active-check-output) (info, CVSS 4.8, published 8 Jun 2026) - [CVE-2026-8833: Checkmk cross-site scripting via URL validation bypass](https://junglewise.ai/threats/cve-2026-8833-checkmk-cross-site-scripting-via-url-validation-bypass) (info, CVSS 8.5, published 8 Jun 2026) - [CVE-2026-8078: Checkmk stored XSS in global settings change log](https://junglewise.ai/threats/cve-2026-8078-checkmk-stored-xss-in-global-settings-change-log) (info, CVSS 4.8, published 8 Jun 2026) - [CVE-2026-7765: Checkmk incorrect authorization in User Messages dashboard widget](https://junglewise.ai/threats/cve-2026-7765-checkmk-incorrect-authorization-in-user-messages-dashboard-widget) (info, CVSS 6.3, published 8 Jun 2026) - [CVE-2026-7186: Checkmk stored XSS in URL dashboard widget](https://junglewise.ai/threats/cve-2026-7186-checkmk-stored-xss-in-url-dashboard-widget) (info, CVSS 8.5, published 8 Jun 2026) - [CVE-2024-47091: Checkmk mk_mysql agent plugin privilege escalation on Windows](https://junglewise.ai/threats/cve-2024-47091-checkmk-mk-mysql-agent-plugin-privilege-escalation-on-windows) (info, CVSS 5.2, published 13 May 2026) - [CVE-2026-33457: Checkmk Livestatus injection in prediction graph page](https://junglewise.ai/threats/cve-2026-33457-checkmk-livestatus-injection-in-prediction-graph-page) (medium, CVSS 6.3, published 10 Apr 2026) - [CVE-2026-33456: Checkmk Livestatus injection in notification test mode](https://junglewise.ai/threats/cve-2026-33456-checkmk-livestatus-injection-in-notification-test-mode) (high, CVSS 7.6, published 10 Apr 2026) ## Most severe Checkmk vulnerabilities - [CVE-2025-39663: Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to…](https://junglewise.ai/threats/cve-2025-39663-cross-site-scripting-xss-vulnerability-in-checkmk-s-distributed) (high, CVSS 8.4, published 30 Oct 2025) - [CVE-2026-33456: Checkmk Livestatus injection in notification test mode](https://junglewise.ai/threats/cve-2026-33456-checkmk-livestatus-injection-in-notification-test-mode) (high, CVSS 7.6, published 10 Apr 2026) - [CVE-2025-64998: Checkmk session hijacking via session signing secret exposure](https://junglewise.ai/threats/cve-2025-64998-checkmk-session-hijacking-via-session-signing-secret-exposure) (high, CVSS 7.2, published 24 Mar 2026) - [CVE-2026-33457: Checkmk Livestatus injection in prediction graph page](https://junglewise.ai/threats/cve-2026-33457-checkmk-livestatus-injection-in-prediction-graph-page) (medium, CVSS 6.3, published 10 Apr 2026) - [CVE-2026-33455: Checkmk Livestatus injection in monitoring quicksearch](https://junglewise.ai/threats/cve-2026-33455-checkmk-livestatus-injection-in-monitoring-quicksearch) (medium, CVSS 6.3, published 10 Apr 2026) - [CVE-2025-58121: Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version…](https://junglewise.ai/threats/cve-2025-58121-insufficient-permission-validation-on-multiple-rest-api-endpoints) (medium, CVSS 5.4, published 18 Nov 2025) - [CVE-2025-58122: Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify…](https://junglewise.ai/threats/cve-2025-58122-insufficient-permission-validation-in-checkmk-2-4-0-before) (medium, CVSS 5.4, published 18 Nov 2025) - [CVE-2026-20915: Checkmk stored XSS in Pending Changes sidebar](https://junglewise.ai/threats/cve-2026-20915-checkmk-stored-xss-in-pending-changes-sidebar) (medium, CVSS 5.4, published 31 Mar 2026) - [CVE-2026-33276: Checkmk stored XSS in Unified Search via host or service names](https://junglewise.ai/threats/cve-2026-33276-checkmk-stored-xss-in-unified-search-via-host-or-service-names) (medium, CVSS 5.4, published 31 Mar 2026) - [CVE-2025-65000: SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <=…](https://junglewise.ai/threats/cve-2025-65000-ssh-private-keys-of-the-remote-alert-handlers-linux-rule-were) (medium, CVSS 5.3, published 18 Dec 2025) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up 200% on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 1 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 2 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 3 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Checkmk vulnerabilities", https://junglewise.ai/threats/technologies/checkmk, 11 November 2026.