https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:18:08.697359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2020 CVE-2023-2020 — Unauthorized scheduling of downtimes via REST API 2026-10-05T21:18:08.715189+00:00

Affected: Tribe29 Checkmk

Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host.