CVE-2026-113461— mk-oracle: Local privilege escalation via insecure Oracle Home library loading
Quick assessment
Affected
Checkmk GmbH Checkmk
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Checkmk 2.5.0p14 存在本地权限提升漏洞。如果启用了"mk-oracle"插件的代理运行，任何拥有对以下目录或文件写入权限的本地用户，均可以 root 身份执行任意代码： 在 文件中列出的 Oracle 主目录下的 Oracle 客户端库目录； 文件本身。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Checkmk GmbH | Checkmk | 2.5.0p14 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-113461
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mk-oracle: Local privilege escalation via insecure Oracle Home library loading
Source: CVE Program / CVE List V5
Vulnerability Description
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
不可信的搜索路径
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Checkmk GmbH | Checkmk | 2.5.0p14 | - |
|
II. Public POCs for CVE-2026-113461
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-113461
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-113461 (1)
IV. Related Vulnerabilities
Same product: Checkmk
-
CVE-2026-14452
Open redirect and XSS via reset_url parameter -
CVE-2026-105331
mk-oracle: Local privilege escalation via malicious Oracle I -
CVE-2026-90990
Livestatus injection via monitoring filter values -
CVE-2026-92882
Redact SNMP community, SNMPv3 pass phrases, and IPMI passwor -
CVE-2026-77021
Missing decompression size limit in agent receiver allows me
Same vendor: Checkmk GmbH
-
CVE-2026-14452
Open redirect and XSS via reset_url parameter -
CVE-2026-105331
mk-oracle: Local privilege escalation via malicious Oracle I -
CVE-2026-90990
Livestatus injection via monitoring filter values -
CVE-2026-92882
Redact SNMP community, SNMPv3 pass phrases, and IPMI passwor -
CVE-2026-77021
Missing decompression size limit in agent receiver allows me
Same weakness: CWE-426
-
CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability -
CVE-2026-103847
Dimension | Untrusted Search Path (CWE-426) -
CVE-2026-83506
Servicing Stack Updates Elevation of Privilege Vulnerability -
CVE-2026-83509
Windows Setup Files Cleanup Elevation of Privilege Vulnerabi -
CVE-2026-69733
Windows Update Elevation of Privilege Vulnerability
V. Comments for CVE-2026-113461
No comments yet