Improper Certificate Validation in Checkmk Exchange Plugin for VMware vSAN
CVE-2025-58126

6.9MEDIUM

Key Information:

Status
Vendor
CVE Published:
28 August 2025

What is CVE-2025-58126?

The Checkmk Exchange plugin for VMware vSAN has a vulnerability related to improper certificate validation. Attackers in a Man-in-the-Middle (MitM) position can exploit this weakness to intercept and manipulate network traffic. This flaw raises significant security concerns for organizations using the plugin, as it may lead to unauthorized data access, potential leakage of sensitive information, and disruptions in service continuity. It is crucial for users to stay informed and apply appropriate mitigations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.checkmk.com/p/vsan
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Felix Eberstaller (Limes Security)
Jakob Hartmann (Limes Security)
JSON
.