CVE-2026-17548

Checkmk versions prior to 2.5.0p12, 2.4.0p36, 2.3.0p50, and all 2.2.0 versions are vulnerable due to a missing authorization flaw that permits authenticated users to access the status and results of background jobs by knowing their IDs. This vulnerability could lead to unauthorized information disclosure, potentially exposing sensitive operational data. Organizations using affected versions should prioritize remediation to mitigate the risk of data leakage.