CVE catalog

CVE-2026-17548

UBUNTU-CVE-2026-17548

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntucheck-mkpro1.2.6p5-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1+esm1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References