CVE-2026-118965
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 11, 2026
Vendor
unknown
Description
Path traversal in the discovered host label synchronization in Checkmk <2.5.0p19, <2.4.0p40 and 2.3.0 (EOL) allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code as the central site user.