CVE-2026-24096 — Insufficient permission validation on multiple REST API Quick Setup endpoints

CVE-2026-24096

Insufficient permission validation on multiple REST API Quick Setup endpoints PUBLISHED

Description (CNA)

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.5.0b1 before 2.5.0b2; affected 2.4.0 before 2.4.0p25

CWE

CWE-280

References

https://checkmk.com/werk/18989

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.