Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://checkmk.com/werk/15191 Vendor Advisory
- https://checkmk.com/werk/15191 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · checkmk, tribe29NVD modified 2026-10-24 13:10
Affected (CPE criteria) 90
cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p28:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p29:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p30:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p31:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p32:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p33:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p34:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p35:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*- and 50 more
References 2
- https://checkmk.com/werk/15191 Vendor Advisory
- https://checkmk.com/werk/15191 Vendor Advisory