https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:22:16.795478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-7765 CVE-2026-7765 — User Messages widget leaked issuer messages on shared dashboards 2026-10-02T11:22:16.796626+00:00

Affected: Checkmk GmbH Checkmk

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by sending requests to the underlying endpoint, even without a User Messages widget present.