MEDIUM 5.3 NVD

CVE-2026-15937

Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenti

Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their own root certificate.

References

https://checkmk.com/werk/19735

Published: 2026-09-04 · Source: NVD · Feed updated: 2026-09-04

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-04 via NVD.

vulnfeed aggregates 8217 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.