CVE-2026-113461

The record

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.

Affected packages

Related vulnerabilities

• CVE-2026-119333 draw.io Desktop is the official Electron build of draw.io. CWE-426
• CVE-2026-116243 pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets… CWE-426
• CVE-2026-57203 Asterisk is an open source private branch exchange and telephony toolkit. CWE-426
• CVE-2026-105477 A vulnerability in Veeam Agent for Linux allows for local privilege escalation. CWE-426
• CVE-2026-83509 Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to… CWE-426
• CVE-2026-83506 Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate… CWE-426
• CVE-2026-83505 Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows… CWE-426
• CVE-2026-70142 Untrusted search path in Windows Update Service allows an authorized attacker to elevate… CWE-426