CVE-2022-48321: Checkmk

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

Affected products

• Checkmk Checkmk: version 2.1.0 only

Published 2023-02-20. Last modified 2026-06-17.