PT-2026-22913 · Checkmk · Checkmk

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-3103

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p23 Checkmk versions prior to 2.3.0p43 Checkmk version 2.2.0

Description A logic flaw exists in the remove password() function that allows a user with limited privileges to cause data loss.

Recommendations Update to a version prior to 2.4.0p23. Update to a version prior to 2.3.0p43. This vulnerability affects Checkmk version 2.2.0, which is end-of-life; upgrade to a supported version.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-3103

Affected Products

Checkmk

References · 7

• https://osv.dev/vulnerability/CVE-2026-3103 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-3103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3103 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-3103 · Security Note
• https://checkmk.com/werk/19041 · Vendor Advisory
• https://t.me/CVEtracker/46311 · Telegram Post