CVE-2025-2596
MEDIUMDescription
Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30, <2.2.0p41, and 2.1.0p49 (EOL)
Is your site exposed to CVE-2025-2596?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
| checkmk | checkmk |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-2596? +
How severe is CVE-2025-2596? +
What products are affected by CVE-2025-2596? +
How do I check if I'm vulnerable to CVE-2025-2596? +
Related Vulnerabilities
The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior …
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session …
This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints …
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior …
Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are …
Insufficient Session Expiration vulnerability in ash-project ash_authentication_phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash_authentication_phoenix/controller.ex. This issue …