--- title: "Checkmk vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/checkmk type: vendor description: "Checkmk has 134 published CVEs, 0 in CISA KEV and 14 with public exploits." updated: 2026-11-06 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Checkmk vulnerabilities - **Published CVEs:** 134 - **In CISA KEV:** 0 - **With a public exploit:** 14 - **With a patch:** 114 - **Average CVSS:** 6.3 - **CVEs in the last two years:** 62 - **First CVE:** 2017-10-01 - **Latest CVE:** 2026-11-06 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 6 | | High | 41 | | Medium | 74 | | Low | 13 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [Checkmk](https://radicalnotion.ai/vendor/checkmk/checkmk) | 126 | | [NagVis](https://radicalnotion.ai/vendor/checkmk/nagvis) | 2 | | [Checkmk 2.2.0](https://radicalnotion.ai/vendor/checkmk/checkmk-2-2-0) | 1 | | [Checkmk 2.3.0](https://radicalnotion.ai/vendor/checkmk/checkmk-2-3-0) | 1 | | [Checkmk 2.4.0](https://radicalnotion.ai/vendor/checkmk/checkmk-2-4-0) | 1 | | [check-mk-api](https://radicalnotion.ai/vendor/checkmk/check-mk-api) | 1 | | [Checkmk Appliance](https://radicalnotion.ai/vendor/checkmk/checkmk-appliance) | 1 | | [Checkmk Windows Agent](https://radicalnotion.ai/vendor/checkmk/checkmk-windows-agent) | 1 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 18 | | [CWE-140](https://radicalnotion.ai/cwe/cwe-140) | Improper Neutralization of Delimiters | 9 | | [CWE-80](https://radicalnotion.ai/cwe/cwe-80) | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 8 | | [CWE-427](https://radicalnotion.ai/cwe/cwe-427) | Uncontrolled Search Path Element | 7 | | [CWE-295](https://radicalnotion.ai/cwe/cwe-295) | Improper Certificate Validation | 7 | | [CWE-532](https://radicalnotion.ai/cwe/cwe-532) | Insertion of Sensitive Information into Log File | 6 | | [CWE-280](https://radicalnotion.ai/cwe/cwe-280) | Improper Handling of Insufficient Permissions or Privileges | 5 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 5 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [Checkmk](https://radicalnotion.ai/cna/checkmk) | 99 | | [Tribe29](https://radicalnotion.ai/cna/tribe29) | 21 | | [mitre](https://radicalnotion.ai/cna/mitre) | 12 | | [KoreLogic](https://radicalnotion.ai/cna/korelogic) | 2 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2021 | 2 | | 2022 | 9 | | 2023 | 27 | | 2024 | 33 | | 2025 | 25 | | 2026 | 37 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-111573 | Privilege escalation via unprotected Windows agent data folder | medium | 6.3 | 0.1% | No | 2026-11-06 | | CVE-2026-103682 | Jolokia special agent exposes password in process list | low | 2.0 | 0.1% | No | 2026-11-06 | | CVE-2026-103674 | NetApp ONTAP special agent exposes password in process list | low | 2.0 | 0.1% | No | 2026-11-06 | | CVE-2026-117611 | Trust of compromised eMudhra root CA in bundled CA stores | high | 7.1 | 0.2% | No | 2026-10-29 | | CVE-2026-113461 | mk-oracle: Local privilege escalation via insecure Oracle Home library loading | medium | 5.2 | 0.1% | No | 2026-10-21 | | CVE-2026-14452 | Open redirect and XSS via reset\_url parameter | high | 8.6 | 0.3% | No | 2026-10-16 | | CVE-2026-105331 | mk-oracle: Local privilege escalation via malicious Oracle Instant Client | medium | 5.2 | 0.1% | No | 2026-10-08 | | CVE-2026-90990 | Livestatus injection via monitoring filter values | medium | 5.3 | 0.4% | No | 2026-09-22 | | CVE-2026-92882 | Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses | low | 2.3 | 0.4% | No | 2026-09-22 | | CVE-2026-77021 | Missing decompression size limit in agent receiver allows memory exhaustion via push agent data | medium | 5.3 | 0.4% | No | 2026-09-21 | | CVE-2026-15937 | Agent receiver certificate confusion allows authentication with a certificate issued for another endpoint | medium | 5.3 | 0.2% | No | 2026-09-04 | | CVE-2026-17548 | Missing authorization for viewing background jobs | medium | 5.3 | 0.4% | No | 2026-08-25 | ## Frequently asked questions ### How many CVEs does Checkmk have? Checkmk has 134 published CVE records since 2017, including 62 in the last two years. ### How many Checkmk CVEs are in CISA KEV? None of Checkmk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Which Checkmk products have the most CVEs? The Checkmk products with the most published CVEs are Checkmk, NagVis, Checkmk 2.2.0, Checkmk 2.3.0, Checkmk 2.4.0. ### What are the most common weakness types in Checkmk CVEs? Checkmk's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-140 (Improper Neutralization of Delimiters), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-427 (Uncontrolled Search Path Element). ### Are there public exploits for Checkmk vulnerabilities? Yes — 14 of Checkmk's CVEs have a known public exploit. ### How many critical Checkmk vulnerabilities are there? Checkmk has 6 critical and 41 high-severity CVEs. ### What is the average severity of Checkmk CVEs? The average CVSS base score across Checkmk's scored CVEs is 6.3. ## Related vendors - [WebKitGTK](https://radicalnotion.ai/vendor/webkitgtk) (135 CVEs) - [Go standard library](https://radicalnotion.ai/vendor/gostandardlibrary) (135 CVEs) - [vLLM](https://radicalnotion.ai/vendor/vllm) (135 CVEs) - [Motorola](https://radicalnotion.ai/vendor/motorola) (134 CVEs) - [Codepeople](https://radicalnotion.ai/vendor/codepeople) (134 CVEs) - [ManageEngine](https://radicalnotion.ai/vendor/manageengine) (134 CVEs) - [Automattic](https://radicalnotion.ai/vendor/automattic) (133 CVEs) - [Honeywell](https://radicalnotion.ai/vendor/honeywell) (133 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/checkmk). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.