← Volver al buscador de CVEs

CVE-2026-33276

Checkmk

Descripción

Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search feature.

CVSS 5.4EPSS 0.14400000000000002%Riesgo 0.55
Ver fuente
Publicación
2026-03-31 15:16:14
Versiones afectadas
<2.5.0b2
Tipo
Core software
Última modificación
2026-07-24 21:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N