Dashboard / CVE-2026-113461

CVE-2026-113461

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 25/100
Published: 2026-10-21 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

No Interaction

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: X
AT: Present
VC: None
VI: None
VA: None

Description

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.

Weakness Classification (2)

References & Advisories (1)

Bug Bounty Relevance

25 / 100
✓ No user interaction

CVSS Score

5.2 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.12%
Raw Score 0.001200
Percentile 1.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00120
2026-10-28
0.00120

Intelligence Sources

nvd ref →

External Links