CVE-2026-33455 — Livestatus injection in monitoring quicksearch
Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient in…
Published: 2026-04-10 · CVSS: 5.3 · CVSS 4.0
Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7