Vulnerability Description
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
Related Weaknesses (CWE)
References
- https://checkmk.com/werk/22169
- https://checkmk.com/werk/22623
- https://github.com/advisories/GHSA-6q48-6c7w-9gw2
FAQ
What is CVE-2026-117611?
CVE-2026-117611 is a documented vulnerability. Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMu...
How severe is CVE-2026-117611?
CVSS scoring is not yet available for CVE-2026-117611. Check NVD for updates.
Is there a patch for CVE-2026-117611?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.