CVE-2026-103682
— UNSCOREDPublished 2026-11-06 · Updated 2026-11-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the Jolokia login password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.
Weaknesses
CWE-214
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-102371PoC
- UNSCOREDCVE-2026-103674
- MEDIUMCVE-2026-109971
- MEDIUMCVE-2026-113495
- MEDIUMCVE-2026-113496
- MEDIUMCVE-2026-116246PoC
- MEDIUMCVE-2026-119117PoC
- LOWCVE-2026-121745PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.