Beveiligingsadvies

CVE-2026-7186

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-08 12:05:28
Laatst bijgewerkt 2026-06-08 13:15:47
Toegewezen door Checkmk
CVSS-score 8.5
Status PUBLISHED

Beschrijving

Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes scripts in other users' browsers when they view the dashboard.