agentprime: checkmk

agentprime: checkmkEvery new CVE for checkmk.https://agentprime.io/CVE-2026-117611: Trust of compromised eMudhra root CA in bundled CA storeshttps://agentprime.io/advisories/CVE-2026-117611/https://agentprime.io/advisories/CVE-2026-117611/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:32:57 GMTCVECVE-2026-113461: mk-oracle: Local privilege escalation via insecure Oracle Home library loadinghttps://agentprime.io/advisories/CVE-2026-113461/https://agentprime.io/advisories/CVE-2026-113461/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:11:34 GMTCVECVE-2026-14452: Open redirect and XSS via reset_url parameterhttps://agentprime.io/advisories/CVE-2026-14452/https://agentprime.io/advisories/CVE-2026-14452/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 09:51:30 GMTCVECVE-2026-105331: mk-oracle: Local privilege escalation via malicious Oracle Instant Clienthttps://agentprime.io/advisories/CVE-2026-105331/https://agentprime.io/advisories/CVE-2026-105331/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:19:41 GMTCVECVE-2026-90990: Livestatus injection via monitoring filter valueshttps://agentprime.io/advisories/CVE-2026-90990/https://agentprime.io/advisories/CVE-2026-90990/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 10:43:28 GMTCVECVE-2026-92882: Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responseshttps://agentprime.io/advisories/CVE-2026-92882/https://agentprime.io/advisories/CVE-2026-92882/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 10:42:59 GMTCVECVE-2026-77021: Missing decompression size limit in agent receiver allows memory exhaustion via push agent datahttps://agentprime.io/advisories/CVE-2026-77021/https://agentprime.io/advisories/CVE-2026-77021/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 10:57:37 GMTCVECVE-2026-15937: Agent receiver certificate confusion allows authentication with a certificate issued for another endpointhttps://agentprime.io/advisories/CVE-2026-15937/https://agentprime.io/advisories/CVE-2026-15937/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 08:24:49 GMTCVECVE-2026-17548: Missing authorization for viewing background jobshttps://agentprime.io/advisories/CVE-2026-17548/https://agentprime.io/advisories/CVE-2026-17548/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 08:35:17 GMTCVECVE-2026-15576: Agent receiver accepts mTLS requests without a client certificatehttps://agentprime.io/advisories/CVE-2026-15576/https://agentprime.io/advisories/CVE-2026-15576/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 11:10:00 GMTCVECVE-2026-7485: Frozen BI aggregations leak host and service names to unauthorized usershttps://agentprime.io/advisories/CVE-2026-7485/https://agentprime.io/advisories/CVE-2026-7485/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 12:12:52 GMTCVECVE-2026-15227: Missing Authorization Allows Editing of Foreign Reportshttps://agentprime.io/advisories/CVE-2026-15227/https://agentprime.io/advisories/CVE-2026-15227/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 12:21:58 GMTCVECVE-2026-8593: Fix Business Intelligence API Pack permissionhttps://agentprime.io/advisories/CVE-2026-8593/https://agentprime.io/advisories/CVE-2026-8593/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 07:20:35 GMTCVECVE-2026-14852: mk_sap_hana: Privilege escalation via crafted sapstartsrv process namehttps://agentprime.io/advisories/CVE-2026-14852/https://agentprime.io/advisories/CVE-2026-14852/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 09:26:28 GMTCVECVE-2026-9549: Fix XSS in service discovery active check outputhttps://agentprime.io/advisories/CVE-2026-9549/https://agentprime.io/advisories/CVE-2026-9549/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 12:07:12 GMTCVECVE-2026-8833: XSS in urlshttps://agentprime.io/advisories/CVE-2026-8833/https://agentprime.io/advisories/CVE-2026-8833/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 12:06:51 GMTCVECVE-2026-8078: Fix stored XSS in global settings change loghttps://agentprime.io/advisories/CVE-2026-8078/https://agentprime.io/advisories/CVE-2026-8078/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 12:06:36 GMTCVECVE-2026-7765: User Messages widget leaked issuer messages on shared dashboardshttps://agentprime.io/advisories/CVE-2026-7765/https://agentprime.io/advisories/CVE-2026-7765/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 12:06:02 GMTCVECVE-2026-7186: Fix stored XSS in URL dashboard widget via dangerous URI schemeshttps://agentprime.io/advisories/CVE-2026-7186/https://agentprime.io/advisories/CVE-2026-7186/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 12:05:28 GMTCVECVE-2024-47091: Privilege escalation via mk_mysql agent plugin on Windowshttps://agentprime.io/advisories/CVE-2024-47091/https://agentprime.io/advisories/CVE-2024-47091/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 08:35:25 GMTCVECVE-2026-33457: Potential livestatus injection in prediction graph pagehttps://agentprime.io/advisories/CVE-2026-33457/https://agentprime.io/advisories/CVE-2026-33457/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 08:31:35 GMTCVECVE-2026-33456: Potential livestatus injection in notification testhttps://agentprime.io/advisories/CVE-2026-33456/https://agentprime.io/advisories/CVE-2026-33456/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 08:31:27 GMTCVECVE-2026-33455: Livestatus injection in monitoring quicksearchhttps://agentprime.io/advisories/CVE-2026-33455/https://agentprime.io/advisories/CVE-2026-33455/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 08:30:20 GMTCVECVE-2025-39666: omd: Local privilege escalation when executing omd commands as roothttps://agentprime.io/advisories/CVE-2025-39666/https://agentprime.io/advisories/CVE-2025-39666/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 12:09:07 GMTCVEcriticalCVE-2026-3466: Cross-site scripting in dashlet titlehttps://agentprime.io/advisories/CVE-2026-3466/https://agentprime.io/advisories/CVE-2026-3466/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 12:08:50 GMTCVECVE-2026-24096: Insufficient permission validation on multiple REST API Quick Setup endpointshttps://agentprime.io/advisories/CVE-2026-24096/https://agentprime.io/advisories/CVE-2026-24096/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 10:07:21 GMTCVECVE-2026-20915: Stored cross-site scripting in Pending Changes sidebarhttps://agentprime.io/advisories/CVE-2026-20915/https://agentprime.io/advisories/CVE-2026-20915/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 13:51:02 GMTCVECVE-2026-33276: XSS in Unified Search via Unescaped Host/Service Nameshttps://agentprime.io/advisories/CVE-2026-33276/https://agentprime.io/advisories/CVE-2026-33276/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 13:44:17 GMTCVECVE-2025-64998: Session hijacking via exposed session signing secret in distributed Checkmk setupshttps://agentprime.io/advisories/CVE-2025-64998/https://agentprime.io/advisories/CVE-2025-64998/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 11:25:58 GMTCVECVE-2026-2859: Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpointhttps://agentprime.io/advisories/CVE-2026-2859/https://agentprime.io/advisories/CVE-2026-2859/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 09:40:43 GMTCVECVE-2026-24097: Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpointhttps://agentprime.io/advisories/CVE-2026-24097/https://agentprime.io/advisories/CVE-2026-24097/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 09:40:05 GMTCVECVE-2026-3103: Deletion of passwords via RestApihttps://agentprime.io/advisories/CVE-2026-3103/https://agentprime.io/advisories/CVE-2026-3103/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 13:15:41 GMTCVECVE-2025-64999: Cross-site scripting in HTML logs of Synthetic Monitoring test serviceshttps://agentprime.io/advisories/CVE-2025-64999/https://agentprime.io/advisories/CVE-2025-64999/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 10:26:00 GMTCVECVE-2026-24095: Missing Permission Check on Analyze Configuration Pagehttps://agentprime.io/advisories/CVE-2026-24095/https://agentprime.io/advisories/CVE-2026-24095/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 15:29:16 GMTCVECVE-2025-65000: Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rulehttps://agentprime.io/advisories/CVE-2025-65000/https://agentprime.io/advisories/CVE-2025-65000/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 14:04:12 GMTCVECVE-2025-64997: Insufficient permission validation when showing agent informationhttps://agentprime.io/advisories/CVE-2025-64997/https://agentprime.io/advisories/CVE-2025-64997/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 09:11:17 GMTCVECVE-2025-58121: Insufficient permission validation on multiple REST API endpointshttps://agentprime.io/advisories/CVE-2025-58121/https://agentprime.io/advisories/CVE-2025-58121/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 15:11:35 GMTCVECVE-2025-58122: Insufficient permission validation when configuring notification parametershttps://agentprime.io/advisories/CVE-2025-58122/https://agentprime.io/advisories/CVE-2025-58122/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 15:11:17 GMTCVECVE-2025-64996: Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's outputhttps://agentprime.io/advisories/CVE-2025-64996/https://agentprime.io/advisories/CVE-2025-64996/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 15:10:53 GMTCVECVE-2025-39663: Cross Site Scripting through compromised remote sitehttps://agentprime.io/advisories/CVE-2025-39663/https://agentprime.io/advisories/CVE-2025-39663/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 10:43:08 GMTCVECVE-2025-39664: Path-Traversal in report schedulerhttps://agentprime.io/advisories/CVE-2025-39664/https://agentprime.io/advisories/CVE-2025-39664/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 15:01:55 GMTCVECVE-2025-32919: Privilege Escalation in Windows License plugin for Checkmk Windows Agenthttps://agentprime.io/advisories/CVE-2025-32919/https://agentprime.io/advisories/CVE-2025-32919/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 15:01:42 GMTCVECVE-2025-32916: Sensitive form data in URL query parametershttps://agentprime.io/advisories/CVE-2025-32916/https://agentprime.io/advisories/CVE-2025-32916/CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 15:00:58 GMTCVECVE-2025-32918: Livestatus injection in autocomplete endpointhttps://agentprime.io/advisories/CVE-2025-32918/https://agentprime.io/advisories/CVE-2025-32918/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Jul 2025 08:12:21 GMTCVECVE-2025-32915: Sensitive data exposed during automatic agent updateshttps://agentprime.io/advisories/CVE-2025-32915/https://agentprime.io/advisories/CVE-2025-32915/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 14:16:01 GMTCVECVE-2025-1712: Arbitrary file write with vcrtracehttps://agentprime.io/advisories/CVE-2025-1712/https://agentprime.io/advisories/CVE-2025-1712/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 May 2025 09:10:42 GMTCVECVE-2025-32917: Privilege escalation in jar_signaturehttps://agentprime.io/advisories/CVE-2025-32917/https://agentprime.io/advisories/CVE-2025-32917/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 10:45:31 GMTCVECVE-2025-3506: Potentially senitive path exposed via unauthenticated http routehttps://agentprime.io/advisories/CVE-2025-3506/https://agentprime.io/advisories/CVE-2025-3506/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 May 2025 11:24:24 GMTCVECVE-2025-2092: Remote site authentication secrets written to web loghttps://agentprime.io/advisories/CVE-2025-2092/https://agentprime.io/advisories/CVE-2025-2092/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Apr 2025 11:38:04 GMTCVECVE-2024-38865: Livestatus command injection in RestAPIhttps://agentprime.io/advisories/CVE-2024-38865/https://agentprime.io/advisories/CVE-2024-38865/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Apr 2025 07:35:35 GMTCVE