https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-39665.htmlhttps://patchthecve.com/cve/CVE-2025-39665.htmlSun, 18 Oct 2026 18:10:00 +0000MEDIUM 5.3: User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.https://patchthecve.com/cve/CVE-2024-47090.htmlhttps://patchthecve.com/cve/CVE-2024-47090.htmlWed, 17 Jun 2026 07:56:31 +0000MEDIUM 6.1: Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSShttps://patchthecve.com/cve/CVE-2024-38866.htmlhttps://patchthecve.com/cve/CVE-2024-38866.htmlWed, 17 Jun 2026 07:41:09 +0000HIGH 7.5: Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injectionhttps://patchthecve.com/cve/CVE-2024-47093.htmlhttps://patchthecve.com/cve/CVE-2024-47093.htmlWed, 17 Jun 2026 07:56:32 +0000HIGH 8.8: Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS