VulnSocial

CVE-2026-24096Disclosure(checkmk / checkmk)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information

checkmk CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-280

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • checkmk

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
checkmk
Products
checkmk

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-01: 2Technical Details · 2026-04-01: 204-01
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-24096 Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows … https://www.cve.org/CVERecord?id=CVE-2026-24096

    Post summary

    The tweet briefly announces CVE-2026-24096, noting insufficient permission validation on Checkmk REST API endpoints, but provides no PoC, exploit, or mitigation information.

    0000067
    56.9K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-24096 - Insufficient permission validation on multiple REST API Quick Setup endpoints Intel Report: https://ift.tt/zuB9IPE

    Post summary

    A new vulnerability CVE-2026-24096 involving insufficient permission validation on REST API endpoints is reported, but no PoC, exploit, patch, or active exploitation details are included.

    0000022
    281 followersView on X
CPE platform detail32 entries

32 of 32 entries

PartVendorProductVersionTarget SWTarget HW
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.4.0--
Appcheckmkcheckmk2.5.0--

Explore more

Back to dashboardcheckmk CVEscheckmk vulnerabilities