Security Advisory

CVE-2026-7186

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-08 12:05:28

Last updated 2026-06-08 13:15:47

Assigner Checkmk

CVSS score not scored

State PUBLISHED

Description

Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes scripts in other users' browsers when they view the dashboard.

← Browse all CVEs View on cve.org ↗