CVE-2026-33455CWE-140

Livestatus injection in monitoring quicksearch

Medium · published April 10, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-140 · Improper Neutralization of Delimiters
Published
2026-04-10T08:30Z
EPSS history
Timeline
  • 10 APR 08:30Z
    Livestatus injection in monitoring quicksearch
    cvelistv5