CVE-2026-24097
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.
Vendor
Product
CWE
Yayın Tarihi
2026-03-13 19:54:16
Güncelleme
2026-03-18 13:37:29
Source Identifier
security@checkmk.com
KEV Date Added
-