← All advisories

Medium severity5.3NVD Advisory· Published Dec 3, 2025· Updated Jun 17, 2026

CVE-2025-39665

CVE-2025-39665

Description

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nagvis/Nagvis3 versions
cpe:2.3:a:nagvis:nagvis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:nagvis:nagvis:*:*:*:*:*:*:*:*range: <1.9.48
- (no CPE)range: <1.9.48
- (no CPE)range: 1.9.0

Patches

Vulnerability mechanics

References

2

github.com/NagVis/nagvis/pull/411/commits/4acabcf9d5b2d26f390e760f59def8e163908d66nvdPatch
www.nagvis.org/downloads/changelog/1.9.48nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.