high7.6
CVE-2026-33456
Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to …
Impact
Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | Versions 2.4.0, 2.5.0 |