Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-10 | 1 | Disclosure1 |
| 2026-04-12 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-33455 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33455 #CVE-2026-33455 #CVE #Medium #CyberSecurity #InfoSec https://t.co/SrIwfoWLCA
Post summary
The tweet is a brief CVE announcement linking to the NVD, providing only severity information without exploitation, patch, or technical details.
CVE-2026-33455 Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insu… https://www.cve.org/CVERecord?id=CVE-2026-33455
Post summary
The CVE-2026-33455 is a Livestatus injection vulnerability in Checkmk’s quicksearch that lets authenticated attackers inject commands through the search query.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | checkmk | checkmk | 2.5.0 | - | - |
| App | checkmk | checkmk | 2.5.0 | - | - |
| App | checkmk | checkmk | 2.5.0 | - | - |