https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:07:48.638613+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325453 EUVD-2026-325453 2026-10-02T19:07:48.642350+00:00 EUVD-2026-325453 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7765 fkie_cve-2026-7765 2026-10-02T19:07:48.642387+00:00

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by sending requests to the underlying endpoint, even without a User Messages widget present.

 https://cve.radiocsirt.org/vuln/ghsa-2x95-frx4-wh7r GHSA-2x95-frx4-wh7r 2026-10-02T19:07:48.642423+00:00

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by sending requests to the underlying endpoint, even without a User Messages widget present.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-7765 UBUNTU-CVE-2026-7765 2026-10-02T19:07:48.642442+00:00

Affected: Ubuntu:Pro:16.04:LTS: check-mk, Ubuntu:18.04:LTS: check-mk

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by sending requests to the underlying endpoint, even without a User Messages widget present.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1817 WID-SEC-W-2026-1817 — Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-02T19:07:48.642466+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.