Browse CVEs

MEDIUM 5.5 CVE-2026-24413 Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not s… Icinga 2.13.14 / 2.14.8+ Fix from $1,6002026-01-29 MEDIUM 5.5 CVE-2026-24414 The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versi… Icinga Powershell Framework 1.11.2 / 1.12.4+ Fix from $1,6002026-01-29 MEDIUM 6.5 CVE-2025-61907 Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoin… Icinga 2.13.13 / 2.14.7+ Fix from $1,6002025-10-16 MEDIUM 6.5 CVE-2025-61908 Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a refere… Icinga 2.13.13 / 2.14.7+ Fix from $1,6002025-10-16 MEDIUM 6.5 CVE-2025-61789 Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use … Icinga Db Web 1.1.4 / 1.2.3+ Fix from $1,6002025-10-16 CRITICAL 9.8 CVE-2025-48057 Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for rep… Icinga 2.12.12 / 2.13.12+ Fix from $2,3002025-05-27 MEDIUM 6.1 CVE-2025-30164 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.1… Icinga Web 2 2.11.5 / 2.12.3+ Fix from $1,6002025-03-26 MEDIUM 5.4 CVE-2025-27609 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.1… Icinga Web 2 2.11.5 / 2.12.3+ Fix from $1,6002025-03-26 MEDIUM 6.1 CVE-2025-27405 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.1… Icinga Web 2 2.11.5 / 2.12.3+ Fix from $1,6002025-03-26 MEDIUM 6.1 CVE-2025-27404 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.1… Icinga Web 2 2.11.5 / 2.12.3+ Fix from $1,6002025-03-26 HIGH 8.8 CVE-2024-24819 icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class `gipfl\Web\Form` is the base… Icingaweb2 Module Incubator 0.22.0+ Fix from $1,9502024-02-09 HIGH 8.3 CVE-2024-24820 Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate … Icinga 1.8.2 / 1.9.2+ Fix from $1,9502024-02-09 HIGH 8.8 CVE-2023-30607 icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configurati… Icinga Web Jira Integration 1.3.2+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2022-24715EPSS 15% Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration,… Icinga Web 2 2.8.6 / 2.9.6+ Fix from $1,9502022-03-08 HIGH 7.5 CVE-2022-24716EPSS 89% Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files o… Icinga Web 2 2.9.6+ Fix from $1,9502022-03-08 MEDIUM 5.3 CVE-2022-24714 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled … Icinga Web 2 2.8.6 / 2.9.6+ Fix from $1,6002022-03-08 MEDIUM 6.5 CVE-2021-32747 Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed… Icinga 2.7.5 / 2.8.3+ Fix from $1,6002021-07-12 MEDIUM 5.3 CVE-2021-32746 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of … Icinga 2.7.5 / 2.8.3+ Fix from $1,6002021-07-12 CRITICAL 9.1 CVE-2020-29663 Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. … Icinga after 2.11.7 Fix from $2,3002020-12-15 HIGH 7.8 CVE-2020-14004 An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/… Icinga after 2.11.3 Fix from $1,9502020-06-12 CRITICAL 9.8 CVE-2018-18249 Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information … Icinga Web 2 2.6.2+ Fix from $2,3002018-12-17 HIGH 7.5 CVE-2018-18250 Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation ite… Icinga Web 2 2.6.2+ Fix from $1,9502018-12-17 MEDIUM 6.5 CVE-2018-18246 Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/m… Icinga Web 2 2.6.2+ Fix from $1,6002018-12-17 MEDIUM 6.1 CVE-2018-18248 Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/t… Icinga Web 2 No fix yet Fix from $1,6002018-12-17 MEDIUM 5.4 CVE-2018-18247 Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. Icinga Web 2 2.6.2+ Fix from $1,6002018-12-17 HIGH 8.1 CVE-2018-6535 An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time password comparison function can disclose the password to an attacke… Icinga after 2.8.1 Fix from $1,9502018-02-27 HIGH 7.8 CVE-2018-6533 An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be us… Icinga after 2.8.1 Fix from $1,9502018-02-27 HIGH 7.5 CVE-2018-6532 An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhau… Icinga after 2.8.0 Fix from $1,9502018-02-27 MEDIUM 6.5 CVE-2018-6534 An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which c… Icinga after 2.8.1 Fix from $1,6002018-02-27 MEDIUM 5.5 CVE-2018-6536 An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which mi… Icinga after 2.8.1 Fix from $1,6002018-02-02