CVE-2026-15227 Missing authorization in Checkmk <2.5.0p10, <2.4.0p35… — CVE Notify — TG.ME

🚨 CVE-2026-15227
Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users.

🎖@cveNotify
Checkmk
Werk #20003: Fix unauthorized users can edit foreign reports
Users without the permission Edit foreign Reports were able to edit foreign reports due to missing permission checks.
September 3, 2026 67