CVE-2025-32916: Checkmk

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Affected products

• Checkmk Checkmk: from 2.1.0, before 2.2.0 (fixed in 2.2.0); version 2.2.0 only; version 2.3.0 only; version 2.4.0 only

Published 2025-10-09. Last modified 2026-06-17.