CVE-2026-15227

Checkmk versions prior to 2.5.0p10, 2.4.0p35, and 2.3.0p49, as well as the end-of-life version 2.2.0, are vulnerable due to a missing authorization flaw that permits authenticated users without the "Edit foreign Reports" permission to alter reports created by other users. This vulnerability can lead to unauthorized modifications of sensitive reporting data, potentially compromising the integrity of the reports. Organizations using affected versions should prioritize remediation to safeguard report integrity and maintain user trust.