https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:42:17.479171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-8833 CVE-2026-8833 — XSS in urls 2026-10-07T08:42:17.494249+00:00

Affected: Checkmk GmbH Checkmk

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as javascript: URIs, resulting in cross-site scripting when another user interacts with the crafted link.