Product by Icinga
Icinga2
12 known vulnerabilities in Icinga2 (Icinga), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-49369 | Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections | 9.8 | |
| High | CVE-2026-61551 | Icinga 2: Stack overflow via deeply nested JSON objects | 8.6 | |
| Critical | CVE-2026-61550 | Icinga 2: Improper access control for JSON-RPC update certificate messages | 9.8 | |
| High | CVE-2021-32743 | Passwords used to access external services inadvertently exposed through API | 8.8 | |
| High | CVE-2026-61552 | Icinga 2 DSL Injection via Unescaped Import Template Name | 7.2 | |
| High | CVE-2021-32739 | Icinga2: Privilege Defined With Unsafe Actions | 8.8 | |
| High | CVE-2021-37698 | Icinga2: Improper Certificate Validation | 7.5 | |
| Critical | CVE-2025-48057 | Icinga 2 certificate renewal might incorrectly renew an invalid certificate | 9.8 | |
| High | CVE-2025-61908 | Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference | 6.5 | |
| High | CVE-2025-61907 | Icinga 2 API users could access restricted values in filter expressions | 6.5 | |
| Medium | CVE-2026-24413 | Icinga has insecure permission of %ProgramData%\icinga2\var on Windows | 5.5 | |
| Medium | CVE-2025-61909 | Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user | 4.4 |