Live › vulnerability › CVE-2026-117611
Checkmk's bundled certificate authority stores (from the certifi and webpki-roots packages) include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public. An attacker holding one of those certificates could impersonate a server that Checkmk connects to and be trusted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 10:24 UTC. All times on this page are UTC.
Checkmk servers in the affected version ranges that make outbound TLS connections relying on the bundled CA stores are exposed to certificate impersonation. Installations on fixed patch levels are not affected. The sources do not state which specific Checkmk connections are most exposed.
No product ranges from the sources yet.
omd version on the Checkmk site.2.5.0p18 or later2.4.0p39 or later2.3.0p52 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
This page as .md · .json · in your agent: get_signal("CVE-2026-117611")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.