CVE-2026-7485
Frozen BI aggregations leak host and service names to unauthorized users
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.
| CWE | CWE-863 |
| Vendor | checkmk gmbh |
| Product | checkmk |
| Published | Aug 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for checkmk gmbh checkmk
Be the first to know when new unknown vulnerabilities affecting checkmk gmbh checkmk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Checkmk GmbH / Checkmk
2.5.0 < 2.5.0p2 2.4.0 < 2.4.0p29 2.3.0 < 2.3.0p47 2.2.0
Credits
🔍 Marcus Klein (ITeratio GmbH)