icinga2 — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in icinga2, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-24413	Icinga has insecure permission of %ProgramData%\icinga2\var on Windows CWE-276	5.5^AI	Medium^AI	2026-01-29
CVE-2025-61909	Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user CWE-250	3.3^AI	Low^AI	2025-10-16
CVE-2025-61908	Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference CWE-476	6.5^AI	Medium^AI	2025-10-16
CVE-2025-61907	Icinga 2 API users could access restricted values in filter expressions CWE-200	6.5^AI	Medium^AI	2025-10-16
CVE-2025-48057	Icinga 2 certificate renewal might incorrectly renew an invalid certificate CWE-296	7.4^AI	High^AI	2025-05-27
CVE-2024-49369	Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections CWE-295	9.8	Critical	2024-11-12
CVE-2021-37698	Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer CWE-295	7.5	High	2021-08-19
CVE-2021-32743	Passwords used to access external services inadvertently exposed through API CWE-202	8.8	High	2021-07-15
CVE-2021-32739	Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities CWE-267	8.8	High	2021-07-15

All 9 known CVE vulnerabilities affecting icinga2 with full Chinese analysis, references, and POCs where available.