What is CVE-2026-8078?

CVE-2026-8078 is a publicly disclosed cybersecurity vulnerability with a MEDIUM severity rating and CVSS score of 4.8.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-8078

MEDIUM4.8/ 10.0

Published: June 8, 2026 at 01:16 PM

Modified: June 17, 2026 at 11:03 AM

Source: security@checkmk.com

Vulnerability Description

Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the Activate Changes page or Audit log.

CVSS Metrics

Base Score

4.8

Severity

MEDIUM

Vector String

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X