PatchSiren

Checkmk CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Checkmk CVE published 2026-11-06

CVE-2026-103674

A local user on the Checkmk server can read the NetApp login password from the process list while the special agent is running due to the login password being included in the command line. This vulnerability affects Checkmk version 2.5.0 before 2.5.0p16 and allows unauthorized access to sensitive information. Checkmk server administrators should verify and limit access to the process list, review and upda [truncated]