Unrated

Livestatus injection in monitoring quicksearch

CVE-2026-33455 First seen on SecPulse Apr 10, 17:30

Original description The description as published by the source.

Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory checkmk.com
advisory github.com
advisory nvd.nist.gov

Key facts

Severity: Unrated
Published: Apr 10, 2026
First seen on SecPulse: Apr 10, 17:30
CWE: CWE-140

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:50