CVE-2026-118965 | Checkmk up to 2.3.0/2.4.0p39/2.5.0p18 Host Label Synchronization path traversal

A vulnerability has been found in Checkmk up to 2.3.0/2.4.0p39/2.5.0p18 and classified as very critical. The impacted element is an unknown function of the component Host Label Synchronization. This manipulation causes path traversal.

The identification of this vulnerability is CVE-2026-118965. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More