CVE-2026-117611

HIGH
—CVSS v3
—CVSS v2
0.33% EPSS (exploit probability)
CWE-295CWE

Description

Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references