HIGH 7.1 NVD

CVE-2026-117611

Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-

Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.

References

https://checkmk.com/werk/22169
https://checkmk.com/werk/22623
https://github.com/advisories/GHSA-6q48-6c7w-9gw2

Published: 2026-10-29 · Source: NVD · Feed updated: 2026-10-29

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-10-29 via NVD.

vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.