Q: What is the authoritative source for CVE-2026-33456?

CVE-2026-33456 (CVE-2026-33456) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2026-33456 — CVE-2026-33456?

Accepted Answer

Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

Question 2

What is the authoritative source for CVE-2026-33456?

Accepted Answer

CVE-2026-33456 (CVE-2026-33456) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	7.6 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Last modified	2026-10-23

CVE-2026-33456CVE-2026-33456

Description

Scoring