https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:27:40.500392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292359 EUVD-2026-292359 2026-10-03T14:27:40.595932+00:00 EUVD-2026-292359 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3466 fkie_cve-2026-3466 2026-10-03T14:27:40.595968+00:00

Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cross-site scripting (XSS) attacks by tricking a victim into clicking a crafted dashlet title link on a shared dashboard.

 https://cve.radiocsirt.org/vuln/ghsa-6wcg-pxr7-8826 GHSA-6wcg-pxr7-8826 2026-10-03T14:27:40.596002+00:00

Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows an attacker with dashboard creation privileges to perform stored cross-site scripting (XSS) attacks by tricking a victim into clicking a crafted dashlet title link on a shared dashboard.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3466 UBUNTU-CVE-2026-3466 2026-10-03T14:27:40.596021+00:00

Affected: Ubuntu:Pro:16.04:LTS: check-mk, Ubuntu:18.04:LTS: check-mk

Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cross-site scripting (XSS) attacks by tricking a victim into clicking a crafted dashlet title link on a shared dashboard.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0983 WID-SEC-W-2026-0983 — Checkmk: Mehrere Schwachstellen 2026-10-03T14:27:40.596046+00:00

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um seine Privilegien zu erhöhen, und um einen Cross-Site Scripting Angriff durchzuführen.