Skip to content
OpenAdvisories

Package · Debian

icinga2

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61550

    Icinga 2: Improper access control for JSON-RPC update certificate messages

    Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • Critical 9.3
    CVE-2025-48057

    Icinga 2 certificate renewal might incorrectly renew an invalid certificate

    Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into i…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-49369 Public exploit

    Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an atta…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu