Icinga icinga2

• CVE-2026-61552 High 7.2 Icinga 2 DSL Injection via Unescaped Import Template Name 0.9%
• CVE-2026-61551 High 8.6 Icinga 2: Stack overflow via deeply nested JSON objects 0.9%
• CVE-2026-61550 Critical 9.8 Icinga 2: Improper access control for JSON-RPC update certificate messages 0.7%
• CVE-2026-24413 Medium 6.8 Icinga has insecure permission of %ProgramData%\icinga2\var on Windows <0.1%
• CVE-2025-61909 Medium 4.0 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user 0.2%
• CVE-2025-61908 High 7.1 Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference 0.6%
• CVE-2025-61907 High 7.1 Icinga 2 API users could access restricted values in filter expressions 0.4%
• CVE-2025-48057 Critical 9.3 Icinga 2 certificate renewal might incorrectly renew an invalid certificate 0.5%
• CVE-2024-49369 Critical 9.8 Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections 2.9%
• CVE-2021-37698 High 7.5 Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer 1.4%
• CVE-2021-32743 High 8.8 Passwords used to access external services inadvertently exposed through API 1.8%
• CVE-2021-32739 High 8.8 Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities 1.1%