Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

icinga2 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in icinga2, with AI-generated Chinese analysis, references, and POCs.

Vendor: Icinga

CVE ID Title CVSS Severity Published
CVE-2026-61552 Icinga 2 DSL Injection via Unescaped Import Template Name CWE-94 7.2 High 2026-09-18
CVE-2026-61551 Icinga 2: Stack overflow via deeply nested JSON objects CWE-674 8.6 High 2026-09-18
CVE-2026-61550 Icinga 2: Improper access control for JSON-RPC update certificate messages CWE-862 9.8 Critical 2026-09-18
CVE-2026-24413 Icinga has insecure permission of %ProgramData%\icinga2\var on Windows CWE-276 5.5AI Medium AI 2026-01-29
CVE-2025-61909 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user CWE-250 3.3AI Low AI 2025-10-16
CVE-2025-61908 Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference CWE-476 6.5AI Medium AI 2025-10-16
CVE-2025-61907 Icinga 2 API users could access restricted values in filter expressions CWE-200 6.5AI Medium AI 2025-10-16
CVE-2025-48057 Icinga 2 certificate renewal might incorrectly renew an invalid certificate CWE-296 7.4AI High AI 2025-05-27
CVE-2024-49369 Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections CWE-295 9.8 Critical 2024-11-12
CVE-2021-37698 Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer CWE-295 7.5 High 2021-08-19
CVE-2021-32743 Passwords used to access external services inadvertently exposed through API CWE-202 8.8 High 2021-07-15
CVE-2021-32739 Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities CWE-267 8.8 High 2021-07-15

All 12 known CVE vulnerabilities affecting icinga2 with full Chinese analysis, references, and POCs where available.