high7.1
CVE-2026-117611
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki…
Impact
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | before 2.5.0p18 |
Versions were read from the advisory text. No structured product data has been published for this record yet.