What is GHSA-p53j-vwhv-xp3w?

GHSA-p53j-vwhv-xp3w is a security advisory published by GitHub Security Advisories with Medium severity. Improper certificate validation in Checkmk \u003c2.5.0p10 allows a relay and a push agent that share...

Which CVE IDs does GHSA-p53j-vwhv-xp3w cover?

GHSA-p53j-vwhv-xp3w covers the following CVE IDs: CVE-2026-15937. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-p53j-vwhv-xp3wMedium

Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-15937 →

📋 Description

Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their own root certificate.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15937
https://checkmk.com/werk/19735
https://github.com/advisories/GHSA-p53j-vwhv-xp3w