CVE-2026-2859
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observing different HTTP response codes in deploy_agent endpoint, which could lead to information disclosure.
Vendor
Product
CWE
Yayın Tarihi
2026-03-13 19:54:34
Güncelleme
2026-03-18 13:23:32
Source Identifier
security@checkmk.com
KEV Date Added
-