Vulnerability in Checkmk Gmbh
CVE-2026-24097
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_…
EPSS: 0.000 (13.5th percentile) — read the EPSS interpretation.
Affected products
- Checkmk Gmbh — versions 2.4.0, 2.3.0, 2.2.0