NVD security advisory
Security advisory for Improper certificate validation in Checkmk <2
CVE-2026-117611
Full advisory details, affected packages, severity context, and original source.
Affected technology
Improper certificate validation in Checkmk <2Affected product
Advisory overview
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
