[ CVE-2026-117611 · Published 29 Oct 2026 ]
Vulnerability in Checkmk GmbH Checkmk
CVSS 7.1
EPSS <1%No fix listed yet
[ Description ]Official description
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.