Vulnerability Description
Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an arbitrary size.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-77021?
CVE-2026-77021 is a documented vulnerability. Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attacker who controls a host registered for push mode to exhaust t...
How severe is CVE-2026-77021?
CVSS scoring is not yet available for CVE-2026-77021. Check NVD for updates.
Is there a patch for CVE-2026-77021?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.