CVE-2026-7186

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p5 Checkmk versions prior to 2.4.0p31 Checkmk versions prior to 2.3.0p48 Checkmk version 2.2.0

Description Stored cross-site scripting occurs in the URL dashboard widget. A user with dashboard editing permissions can store a URL using a dangerous URI scheme, such as javascript:, which executes scripts in the browsers of other users who view the dashboard.

Recommendations Update to version 2.5.0p5 or later. Update to version 2.4.0p31 or later. Update to version 2.3.0p48 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.