CVE-2026-117611— Trust of compromised eMudhra root CA in bundled CA stores

Quick assessment

Affected

Checkmk GmbH Checkmk

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Checkmk 在以下版本中存在证书验证不当的漏洞：Checkmk <2.5.0p18、<2.4.0p39、<2.3.0p52 以及 2.2.0（已停止支持）。该问题源于随和捆绑提供的证书颁发机构（CA）存储中，包含一个信任 eMudhra（emSign）中间证书的根 CA，而这些中间证书的私钥已公开。

CVSS 7.1 · High Updated Oct 29, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Trust of compromised eMudhra root CA in bundled CA stores

Source: CVE Program / CVE List V5

Vulnerability Description

Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H

Source: CVE Program / CVE List V5

Vulnerability Type

证书验证不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Checkmk GmbH	Checkmk	2.5.0 ~ 2.5.0p18	-

II. Public POCs for CVE-2026-117611

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117611

请登录查看更多情报信息。

Other References for CVE-2026-117611 (3)

https://github.com/advisories/GHSA-6q48-6c7w-9gw2 third-party-advisory
https://checkmk.com/werk/22169 vendor-advisory
https://checkmk.com/werk/22623 vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-117611

IV. Related Vulnerabilities

Same product: Checkmk

Same vendor: Checkmk GmbH

Same weakness: CWE-295