CVE-2026-3103: Deletion of passwords via RestApi
Published Mar 4, 2026
·Updated
A logic error in the removepassword() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss.
Affected Software
80 affected components
Checkmk GmbH Checkmk<2.4.0p23, <2.3.0p43
Checkmk Checkmk=2.2.0
Checkmk Checkmk=2.3.0
Checkmk Checkmk=2.3.0-b1
Checkmk Checkmk=2.3.0-b2
Checkmk Checkmk=2.3.0-b3
Checkmk Checkmk=2.3.0-b4
Checkmk Checkmk=2.3.0-b5
Checkmk Checkmk=2.3.0-b6
Checkmk Checkmk=2.3.0-p1
Checkmk Checkmk=2.3.0-p10
Checkmk Checkmk=2.3.0-p11
Checkmk Checkmk=2.3.0-p12
Checkmk Checkmk=2.3.0-p13
Checkmk Checkmk=2.3.0-p14
Checkmk Checkmk=2.3.0-p15
Checkmk Checkmk=2.3.0-p16
Checkmk Checkmk=2.3.0-p17
Checkmk Checkmk=2.3.0-p18
Checkmk Checkmk=2.3.0-p19
Checkmk Checkmk=2.3.0-p2
Checkmk Checkmk=2.3.0-p20
Checkmk Checkmk=2.3.0-p21
Checkmk Checkmk=2.3.0-p22
Checkmk Checkmk=2.3.0-p23
Checkmk Checkmk=2.3.0-p24
Checkmk Checkmk=2.3.0-p25
Checkmk Checkmk=2.3.0-p26
Checkmk Checkmk=2.3.0-p27
Checkmk Checkmk=2.3.0-p28
Checkmk Checkmk=2.3.0-p29
Checkmk Checkmk=2.3.0-p3
Checkmk Checkmk=2.3.0-p30
Checkmk Checkmk=2.3.0-p31
Checkmk Checkmk=2.3.0-p32
Checkmk Checkmk=2.3.0-p33
Checkmk Checkmk=2.3.0-p34
Checkmk Checkmk=2.3.0-p35
Checkmk Checkmk=2.3.0-p36
Checkmk Checkmk=2.3.0-p37
Checkmk Checkmk=2.3.0-p38
Checkmk Checkmk=2.3.0-p39
Checkmk Checkmk=2.3.0-p4
Checkmk Checkmk=2.3.0-p40
Checkmk Checkmk=2.3.0-p41
Checkmk Checkmk=2.3.0-p42
Checkmk Checkmk=2.3.0-p5
Checkmk Checkmk=2.3.0-p6
Checkmk Checkmk=2.3.0-p7
Checkmk Checkmk=2.3.0-p8
Checkmk Checkmk=2.3.0-p9
Checkmk Checkmk=2.4.0
Checkmk Checkmk=2.4.0-b1
Checkmk Checkmk=2.4.0-b2
Checkmk Checkmk=2.4.0-b3
Checkmk Checkmk=2.4.0-b4
Checkmk Checkmk=2.4.0-b5
Checkmk Checkmk=2.4.0-b6
Checkmk Checkmk=2.4.0-p1
Checkmk Checkmk=2.4.0-p10
Checkmk Checkmk=2.4.0-p11
Checkmk Checkmk=2.4.0-p12
Checkmk Checkmk=2.4.0-p13
Checkmk Checkmk=2.4.0-p14
Checkmk Checkmk=2.4.0-p15
Checkmk Checkmk=2.4.0-p16
Checkmk Checkmk=2.4.0-p17
Checkmk Checkmk=2.4.0-p18
Checkmk Checkmk=2.4.0-p19
Checkmk Checkmk=2.4.0-p2
Checkmk Checkmk=2.4.0-p20
Checkmk Checkmk=2.4.0-p21
Checkmk Checkmk=2.4.0-p22
Checkmk Checkmk=2.4.0-p3
Checkmk Checkmk=2.4.0-p4
Checkmk Checkmk=2.4.0-p5
Checkmk Checkmk=2.4.0-p6
Checkmk Checkmk=2.4.0-p7
Checkmk Checkmk=2.4.0-p8
Checkmk Checkmk=2.4.0-p9
Event History
Mar 4, 2026
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Dec 1, 58158
Event
via FIRST·11:54 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-3103?
CVE-2026-3103 is classified as a low-severity vulnerability that allows data loss due to a logic error.
2
How do I fix CVE-2026-3103?
To fix CVE-2026-3103, upgrade to Checkmk versions 2.4.0p23 or higher, or 2.3.0p43 or higher.
3
Who is affected by CVE-2026-3103?
Checkmk GmbH users running versions earlier than 2.4.0p23, 2.3.0p43, or 2.2.0 are affected by CVE-2026-3103.
4
What type of issue does CVE-2026-3103 represent?
CVE-2026-3103 represents a logic error that allows low-privileged users to delete passwords.
5
Is there a workaround for CVE-2026-3103?
There are no official workarounds for CVE-2026-3103; upgrading to a safe version is the recommended approach.