PT-2026-29510

CVE-2026-24096

·

Published

2026-04-01

·

Updated

2026-04-02

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Checkmk versions 2.4.0 through 2.4.0p25 and 2.5.0 through 2.5.0b2
Description Insufficient permission validation exists on multiple REST API Quick Setup endpoints. This allows low-privileged users to perform unauthorized actions or obtain sensitive information.
Recommendations Update to version 2.4.0p26 or later. Update to version 2.5.0b2 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-280: Improper Handling of Insufficient Permissions or Privileges
Related identifiers
CVE-2026-24096
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com