What is CVE-2026-7186?

CVE-2026-7186 is a publicly disclosed cybersecurity vulnerability with a HIGH severity rating and CVSS score of 8.5.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-7186

HIGH8.5/ 10.0

Published: June 8, 2026 at 01:16 PM

Modified: June 17, 2026 at 11:01 AM

Source: security@checkmk.com

Vulnerability Description

Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes scripts in other users' browsers when they view the dashboard.

CVSS Metrics

Base Score

8.5

Severity

HIGH

Vector String

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X