CVE-2026-33456

Vulnerability Description

Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

Vulnerability Details

Published Date

April 10, 2026

Last Modified

April 13, 2026

CWE ID

CWE-140

Source

NVD

Vendor

Checkmk GmbH

Product

Checkmk

External References

https://checkmk.com/werk/17989

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment