Login Request a demo
IC
Product
icinga2
by Icinga · last CVE Sep 18, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 0
Severity
All severities9Critical3High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add icinga2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-61550
9.8
1%
Sep 18
Icinga 2: Improper access control for JSON-RPC update certificate messages
Affected: >= 2.8, < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2025-48057
9.8
0%
May 27
Icinga 2 certificate renewal might incorrectly renew an invalid certificate
Affected: >= 2.14.0, < 2.14.6; >= 2.13.0, < 2.13.12; < 2.12.12
CVE-2024-49369
9.8
3%
Nov 12
Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections
Affected: >= 2.4.0, < 2.11.12; >= 2.12.0, < 2.12.11; >= 2.13.0, < 2.13.10; >= 2.14.0, < 2.14.3
CVE-2026-61551
8.6
1%
Sep 18
Icinga 2: Stack overflow via deeply nested JSON objects
Affected: < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2026-61552
7.2
1%
Sep 18
Icinga 2 DSL Injection via Unescaped Import Template Name
Affected: >= 2.4, < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2025-61908
6.5
1%
Oct 16
Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference
Affected: >=2.10.0, < 2.13.13; >=2.14.0, < 2.14.7; >=2.15.0, < 2.15.1
CVE-2025-61907
6.5
0%
Oct 16
Icinga 2 API users could access restricted values in filter expressions
Affected: >= 2.15.0, < 2.15.1; >= 2.14.0, < 2.14.7; >= 2.4.0, < 2.13.13
CVE-2026-24413
5.5
0%
Jan 29
Icinga has insecure permission of %ProgramData%\icinga2\var on Windows
Affected: >= 2.3.0, < 2.13.14; >= 2.14.0, < 2.14.8; >= 2.15.0, < 2.15.2
CVE-2025-61909
4.4
0%
Oct 16
Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user
Affected: >=2.10.0, < 2.13.13; >=2.14.0, < 2.14.7; >=2.15.0, < 2.15.1
Showing 9