CVE-2026-24095: Missing Permission Check on Analyze Configuration Page
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows users with the "Use WATO" permission to access the "Analyze configuration" page by directly navigating to its URL, bypassing the intended "Access analyze configuration" permission check. If these users also have the "Make changes, perform actions" permission, they can perform unauthorized actions such as disabling checks or acknowledging results.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24095?
The severity of CVE-2026-24095 has not been officially rated, but it poses a critical security risk due to improper permission enforcement.
How do I fix CVE-2026-24095?
To fix CVE-2026-24095, upgrade Checkmk to version 2.4.0p21 or later, 2.3.0p43 or later, or utilize a patched version.
What are the affected versions in CVE-2026-24095?
CVE-2026-24095 affects Checkmk versions 2.4.0 prior to 2.4.0p21, 2.3.0 prior to 2.3.0p43, and 2.2.0.
Who is impacted by CVE-2026-24095?
Users with the "Use WATO" permission in the affected Checkmk versions can be impacted by CVE-2026-24095.
What is the exploitation method for CVE-2026-24095?
CVE-2026-24095 can be exploited by users accessing the "Analyze configuration" page directly through its URL, bypassing permission checks.