CVE-2026-15227— Missing Authorization Allows Editing of Foreign Reports
Possible ATT&CK Techniques 1AI
T1136.002 · Domain AccountAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Checkmk GmbH | Checkmk | 2.5.0< 2.5.0p10 | affected |
2.4.0< 2.4.0p35 | affected | ||
2.3.0< 2.3.0p49 | affected | ||
2.2.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15227
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authorization Allows Editing of Foreign Reports
Source: CVE Program / CVE List V5
Vulnerability Description
Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Checkmk 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Checkmk是Checkmk公司的一个 IT 监控平台。 Checkmk 2.5.0p10之前版本、2.4.0p35之前版本、2.3.0p49之前版本和2.2.0版本存在授权问题漏洞，该漏洞源于缺少授权，可能导致已认证用户在没有“Edit foreign Reports”权限的情况下修改其他用户拥有的报告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Checkmk GmbH | Checkmk | 2.5.0 ~ 2.5.0p10 | - |
II. Public POCs for CVE-2026-15227
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15227
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-15227 (1)
IV. Related Vulnerabilities
Same weakness: CWE-862
- CVE-2026-70618
Spacebar Server Missing Authorization via member-ids Endpoin - CVE-2026-70617
Spacebar Server Missing Authorization via Group DM Recipient - CVE-2026-48168
PraisonAI: GitHub Actions Claude workflow command injection - CVE-2026-7529
wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenti - CVE-2026-7456
Udimi Tools <= 3.2 - Missing Authorization to Authenticated
V. Comments for CVE-2026-15227
No comments yet