https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:20:35.389987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-3466 CVE-2026-3466 — Cross-site scripting in dashlet title 2026-10-02T10:20:35.405972+00:00

Affected: Checkmk GmbH Checkmk

Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0 allows an attacker with dashboard creation privileges to perform stored cross-site scripting (XSS) attacks by tricking a victim into clicking a crafted dashlet title link on a shared dashboard.