PT-2026-29255 · Checkmk · Checkmk

Michał Kaczmarek · Publicado 2026-03-31 · Atualizado 2026-04-02 · CVE-2026-33276

Positive Technologies (AI Summary)

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Checkmk versions 2.5.0 through 2.5.0b1

Description A stored cross-site scripting issue exists in Checkmk. An authenticated user with the ability to create hosts or services can inject malicious JavaScript code. This code will then execute in the browsers of other users when they utilize the Unified Search feature. The vulnerability allows for arbitrary JavaScript execution.

Recommendations Update to version 2.5.0b2 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-33276

Produtos afetados

Checkmk

Referências · 6

• https://ubuntu.com/security/CVE-2026-33276 · Aviso do Fabricante
• https://checkmk.com/werk/19525 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2039004456675655788 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33276 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-33276 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-33276 · Nota de Segurança