CVE-2026-33455

Livestatus injection in monitoring quicksearch PUBLISHED

Description (CNA)

Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.5.0 before 2.5.0b4

CWE

CWE-140

References

https://checkmk.com/werk/17988

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.