Unrated

Potential livestatus injection in notification test

CVE-2026-33456 First seen on SecPulse Apr 10, 17:31

Original description The description as published by the source.

Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory checkmk.com
advisory github.com
advisory nvd.nist.gov

Key facts

Severity: Unrated
Published: Apr 10, 2026
First seen on SecPulse: Apr 10, 17:31
CWE: CWE-140

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 21:04