Auth bypass in Checkmk Gmbh

CVE-2026-8593

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows users without permissions to view and modify BI packs and rules

Vulnerability class: Broken Access Control

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.