CVE-2026-7485: Checkmk 2.5.0 to before 2.5.0p2, 2.4.0 to before 2.4.0p29, 2.3.0 to before 2.3.0p47, 2.2.0

Affected technology

Checkmk · 2.5.0 to before 2.5.0p2, 2.4.0 to before 2.4.0p29, 2.3.0 to before 2.3.0p47, 2.2.0
Checkmk GmbH

Description’s affected range: versions

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user with restricted host and service visibility can learn the names and the existence of hosts and services they are not authorized to see. Vendor/CNA’s CVSS 4.0 assessment (base score 2.3/10) rates confidentiality impact as low; integrity and availability impact as none.