CVE-2025-58126: Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange
Published Aug 28, 2025
·Updated
Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic.
Affected Software
2 affected components
Checkmk Exchange plugin VMware vSAN
Tomtretbar Vmware Vsan Checkmk
Event History
Aug 28, 2025
CVE Published
via MITRE·12:59 PM
Data Sourced
via MITRE·12:59 PM
DescriptionWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58126?
CVE-2025-58126 is a critical vulnerability due to improper certificate validation.
2
How do I fix CVE-2025-58126?
To fix CVE-2025-58126, ensure that proper certificate validation is implemented in the Checkmk Exchange plugin for VMware vSAN.
3
What systems are affected by CVE-2025-58126?
CVE-2025-58126 affects the Checkmk Exchange plugin for VMware vSAN.
4
What type of attacks can CVE-2025-58126 enable?
CVE-2025-58126 can enable man-in-the-middle (MitM) attacks that allow interception of traffic.
5
Is CVE-2025-58126 a local or remote vulnerability?
CVE-2025-58126 is a remote vulnerability that can be exploited by attackers within the network.