CVE-2026-15576

Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in limited impact on integrity and availability. Only the Cloud, Ultimate and Ultimate MT editions are affected, as other editions do not expose relay endpoints.

CVSS

No CVSS.

References

Link	Resource
https://checkmk.com/werk/20174

Configurations

No configuration.

History

16 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Autenticación incorrecta en el receptor del agente de Checkmk menor que 2.5.0p10 permite a un atacante remoto no autenticado eludir la verificación mutua de certificados de cliente TLS de los puntos finales de retransmisión al proporcionar una identidad de marcador de posición fija en la URL de la solicitud, lo que resulta en un impacto limitado en la integridad y la disponibilidad. Solo las ediciones Cloud, Ultimate y Ultimate MT se ven afectadas, ya que otras ediciones no exponen puntos finales de retransmisión.

Information

Published : 2026-08-21 11:17

Updated : 2026-10-16 15:10

NVD link : CVE-2026-15576

Mitre link : CVE-2026-15576

CVE.ORG link : CVE-2026-15576

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-15576", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15576", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-21T11:53:35.618102Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@checkmk.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@checkmk.com", "affectedData": [{"vendor": "Checkmk GmbH", "product": "Checkmk", "versions": [{"status": "affected", "version": "2.5.0", "lessThan": "2.5.0p10", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-21T11:17:04.463", "references": [{"url": "https://checkmk.com/werk/20174", "source": "security@checkmk.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@checkmk.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in limited impact on integrity and availability. Only the Cloud, Ultimate and Ultimate MT editions are affected, as other editions do not expose relay endpoints."}, {"lang": "es", "value": "Autenticaci\u00f3n incorrecta en el receptor del agente de Checkmk menor que 2.5.0p10 permite a un atacante remoto no autenticado eludir la verificaci\u00f3n mutua de certificados de cliente TLS de los puntos finales de retransmisi\u00f3n al proporcionar una identidad de marcador de posici\u00f3n fija en la URL de la solicitud, lo que resulta en un impacto limitado en la integridad y la disponibilidad. Solo las ediciones Cloud, Ultimate y Ultimate MT se ven afectadas, ya que otras ediciones no exponen puntos finales de retransmisi\u00f3n."}], "lastModified": "2026-10-16T15:10:00.103", "sourceIdentifier": "security@checkmk.com"}