🚨 CVE-2026-15227
Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users.
🎖@cveNotify

Checkmk
Werk #20003: Fix unauthorized users can edit foreign reports
Users without the permission Edit foreign Reports were able to edit foreign reports due to missing permission checks.
September 3, 2026 67