CVE-2026-20915

CVSS Score & Metrics

Base Score

5.4 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N                                    

Vulnerability Description

Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScript into the Pending Changes sidebar, which will execute in the browsers of other users viewing the sidebar.

Vulnerability Details

Published Date

March 31, 2026

Last Modified

April 02, 2026

CWE ID

CWE-79

Source

NVD

Vendor

Checkmk GmbH

Product

Checkmk

External References

https://checkmk.com/werk/19526

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment