{"id":"CVE-2026-117611","published":"2026-10-29T10:17:03.730","lastModified":"2026-10-29T15:17:20.567","description":"Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with \"certifi\" and \"webpki-roots\" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://checkmk.com/werk/22169","tags":[]},{"url":"https://checkmk.com/werk/22623","tags":[]},{"url":"https://github.com/advisories/GHSA-6q48-6c7w-9gw2","tags":[]}],"exploitRefs":[{"url":"https://github.com/advisories/GHSA-6q48-6c7w-9gw2","tags":[]}],"hasPoc":true,"ai":null}