Login Request a demo
IC
Product
icinga2
by Icinga · last CVE Sep 18, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 0
Severity
All severities7Critical1High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add icinga2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-61550
9.8
1%
Sep 18
Icinga 2: Improper access control for JSON-RPC update certificate messages
Affected: >= 2.8, < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2026-61551
8.6
1%
Sep 18
Icinga 2: Stack overflow via deeply nested JSON objects
Affected: < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2026-61552
7.2
1%
Sep 18
Icinga 2 DSL Injection via Unescaped Import Template Name
Affected: >= 2.4, < 2.14.9; >= 2.15.0, < 2.15.4; >= 2.16.0, < 2.16.2
CVE-2025-61908
6.5
1%
Oct 16
Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference
Affected: >=2.10.0, < 2.13.13; >=2.14.0, < 2.14.7; >=2.15.0, < 2.15.1
CVE-2025-61907
6.5
0%
Oct 16
Icinga 2 API users could access restricted values in filter expressions
Affected: >= 2.15.0, < 2.15.1; >= 2.14.0, < 2.14.7; >= 2.4.0, < 2.13.13
CVE-2026-24413
5.5
0%
Jan 29
Icinga has insecure permission of %ProgramData%\icinga2\var on Windows
Affected: >= 2.3.0, < 2.13.14; >= 2.14.0, < 2.14.8; >= 2.15.0, < 2.15.2
CVE-2025-61909
4.4
0%
Oct 16
Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user
Affected: >=2.10.0, < 2.13.13; >=2.14.0, < 2.14.7; >=2.15.0, < 2.15.1
Showing 7