IC
Vendor
Icinga
53
CVEs
0
On KEV
0
New 30D
Products
IC9.8
Icinga
Icinga
31 CVEs0 on KEV0 new
IW9.8
Icinga Web 2
Icinga
13 CVEs0 on KEV0 new
IC9.8
icinga2
Icinga
3 CVEs0 on KEV0 new
ID6.5
Icinga DB Web
Icinga
2 CVEs0 on KEV0 new
IP5.5
Icinga Powershell Framework
Icinga
1 CVEs0 on KEV0 new
IW8.8
Icinga Web Jira Integration
Icinga
1 CVEs0 on KEV0 new
IC8.8
Icingaweb2-module-incubator
Icinga
1 CVEs0 on KEV0 new
IP7.6
ipl-web
Icinga
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61552 | IC icinga2 Icinga | 7.2 | Sep 18 | Icinga 2 DSL Injection via Unescaped Import Template Name |
| CVE-2026-61551 | IC icinga2 Icinga | 8.6 | Sep 18 | Icinga 2: Stack overflow via deeply nested JSON objects |
| CVE-2026-61550 | IC icinga2 Icinga | 9.8 | Sep 18 | Icinga 2: Improper access control for JSON-RPC update certificate messages |
| CVE-2026-42224 | IP ipl-web Icinga | 7.6 | May 8 | ipl/web is vulnerable to reflected XSS by malformed search requests |
| CVE-2026-24414 | IP Icinga Powershell Framework Icinga | 5.5 | Jan 29 | The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments |
| CVE-2026-24413 | IC Icinga Icinga | 5.5 | Jan 29 | Icinga 2 is an open source monitoring system |
| CVE-2025-61909 | IC Icinga Icinga | 4.4 | Oct 16 | Icinga 2 is an open source monitoring system |
| CVE-2025-61908 | IC Icinga Icinga | 6.5 | Oct 16 | Icinga 2 is an open source monitoring system |
| CVE-2025-61907 | IC Icinga Icinga | 6.5 | Oct 16 | Icinga 2 is an open source monitoring system |
| CVE-2025-61789 | ID Icinga DB Web Icinga | 6.5 | Oct 16 | Icinga DB Web provides a graphical interface for Icinga monitoring |
| CVE-2025-53840 | ID Icinga DB Web Icinga | 2.4 | Jul 16 | Icinga DB Web provides a graphical interface for Icinga monitoring |
| CVE-2025-48057 | IC Icinga Icinga | 9.8 | May 27 | Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting |
| CVE-2025-30164 | IW Icinga Web 2 Icinga | 6.1 | Mar 26 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2025-27609 | IW Icinga Web 2 Icinga | 5.4 | Mar 26 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2025-27405 | IW Icinga Web 2 Icinga | 6.1 | Mar 26 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2025-27404 | IW Icinga Web 2 Icinga | 6.1 | Mar 26 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2024-49369 | IC Icinga Icinga | 9.8 | Nov 12 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting |
| CVE-2024-24819 | IC Icingaweb2-module-incubator Icinga | 8.8 | Feb 9 | icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries |
| CVE-2024-24820 | IC Icinga Icinga | 8.3 | Feb 9 | Icinga Director is a tool designed to make Icinga 2 configuration handling easy |
| CVE-2023-30607 | IW Icinga Web Jira Integration Icinga | 8.8 | Jul 5 | icingaweb2-module-jira provides integration with Atlassian Jira |
| CVE-2022-24716 | IW Icinga Web 2 Icinga | 7.5 | Mar 8 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2022-24715 | IW Icinga Web 2 Icinga | 8.8 | Mar 8 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2022-24714 | IW Icinga Web 2 Icinga | 5.3 | Mar 8 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2021-37698 | IC Icinga Icinga | 7.5 | Aug 19 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting |
| CVE-2021-32743 | IC Icinga Icinga | 8.8 | Jul 15 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting |
| CVE-2021-32739 | IC Icinga Icinga | 8.8 | Jul 15 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting |
| CVE-2021-32747 | IC Icinga Icinga | 6.5 | Jul 12 | Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface |
| CVE-2021-32746 | IC Icinga Icinga | 5.3 | Jul 12 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface |
| CVE-2020-29663 | IC Icinga Icinga | 9.1 | Dec 15 | Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL |
| CVE-2020-24368 | IW Icinga Web 2 Icinga | 7.5 | Aug 19 | Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process… |
| CVE-2020-14004 | IC Icinga Icinga | 7.8 | Jun 12 | An issue was discovered in Icinga2 before v2.12.0-rc1 |
| CVE-2018-18250 | IW Icinga Web 2 Icinga | 7.5 | Dec 17 | Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item |
| CVE-2018-18249 | IW Icinga Web 2 Icinga | 9.8 | Dec 17 | Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a… |
| CVE-2018-18248 | IW Icinga Web 2 Icinga | 6.1 | Dec 17 | Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the… |
| CVE-2018-18247 | IW Icinga Web 2 Icinga | 5.4 | Dec 17 | Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter |
| CVE-2018-18246 | IW Icinga Web 2 Icinga | 6.5 | Dec 17 | Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to… |
| CVE-2018-6535 | IC Icinga Icinga | 8.1 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 |
| CVE-2018-6534 | IC Icinga Icinga | 6.5 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 |
| CVE-2018-6533 | IC Icinga Icinga | 7.8 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 |
| CVE-2018-6532 | IC Icinga Icinga | 7.5 | Feb 27 | An issue was discovered in Icinga 2.x through 2.8.1 |
| CVE-2018-6536 | IC Icinga Icinga | 5.5 | Feb 2 | An issue was discovered in Icinga 2.x through 2.8.1 |
| CVE-2017-16933 | IC Icinga Icinga | 7.0 | Nov 24 | etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging… |
| CVE-2017-16882 | IC Icinga Icinga | 7.8 | Nov 18 | Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have… |
| CVE-2015-8010 | IC Icinga Icinga | 6.1 | Mar 27 | Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web… |
| CVE-2014-2386 | IC Icinga Icinga | – | Mar 25 | Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1)… |
| CVE-2014-1878 | IC Icinga Icinga | – | Feb 28 | Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before… |
| CVE-2013-7108 | IC Icinga Icinga | – | Jan 15 | Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain… |
| CVE-2013-7106 | IC Icinga Icinga | – | Jan 15 | Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and… |
| CVE-2013-7107 | IC Icinga Icinga | – | Jan 14 | Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for… |
| CVE-2012-6096 | IC Icinga Icinga | – | Jan 22 | Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before… |
| CVE-2012-3441 | IC Icinga Icinga | – | Aug 25 | The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access… |
| CVE-2011-2477 | IC Icinga Icinga | – | Jun 14 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary… |
| CVE-2011-2179 | IC Icinga Icinga | – | Jun 14 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script… |