Checkmk GmbH · weakness class
File and Path Handling
17 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.
- The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making…
- Checkmk NagVis Remote Code Execution
- Path-Traversal in report scheduler
- Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.
- Privilege escalation in agent via LD_LIBRARY_PATH
- Unrestricted upload and download paths in check_sftp
- Arbitrary file write and code execution via crafted Synthetic Monitoring agent data
- Path traversal in host label synchronization allows code execution on the central site from a remote site
- In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
- Privilege escalation in windows agent
- Privilege escalation in jar_signature
- Privilege Escalation in Windows License plugin for Checkmk Windows Agent
- Privilege escalation in jar_signature
- omd: Local privilege escalation when executing omd commands as root
- mk-oracle: Local privilege escalation via insecure Oracle Home library loading
- Privilege escalation via mk_mysql agent plugin on Windows
- mk-oracle: Local privilege escalation via malicious Oracle Instant Client
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.