CVE-2026-33455 | BDVDB-2026-326306 Detail
CheckmkCheckmk
Description#
Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.
Impact#
CAPEC-15: Command Delimiters
Weaknesses#
- CWE-140 Improper Neutralization of Delimiters
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.