https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:05:00.609438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325448 EUVD-2026-325448 2026-10-02T09:05:00.614434+00:00 EUVD-2026-325448 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8833 fkie_cve-2026-8833 2026-10-02T09:05:00.614483+00:00

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another user interacts with the crafted link.

 https://cve.radiocsirt.org/vuln/ghsa-hc7p-6r8x-vr4q GHSA-hc7p-6r8x-vr4q 2026-10-02T09:05:00.614537+00:00

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another user interacts with the crafted link.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8833 UBUNTU-CVE-2026-8833 2026-10-02T09:05:00.614569+00:00

Affected: Ubuntu:Pro:16.04:LTS: check-mk, Ubuntu:18.04:LTS: check-mk

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another user interacts with the crafted link.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1817 WID-SEC-W-2026-1817 — Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-02T09:05:00.614608+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.