Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://checkmk.com/werk/17989 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.1 · checkmkNVD modified 2026-10-23 23:10
Affected (CPE criteria) 35
cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b4:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b5:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:b6:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p13:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p14:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p15:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p16:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p17:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p18:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p19:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p20:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p21:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p22:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p23:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p24:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p25:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.5.0:b1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.5.0:b2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.5.0:b3:*:*:*:*:*:*
References 1
- https://checkmk.com/werk/17989 Vendor Advisory