Vulnerabilities in Icinga
28 resultsCVE-2026-42224HIGHipl/web is vulnerable to reflected XSS by malformed search requestsEPSS 0.3%CVE-2025-30164MEDIUMIcinga Web 2 has open redirect on login pageEPSS 0.2%CVE-2023-30607MEDIUMicingaweb2-module-jira template and field configuration are susceptible to CSRFEPSS 0.2%CVE-2025-27609LOWIcinga Web 2 Vulnerable to Reflected XSSEPSS 0.2%CVE-2025-61909MEDIUMIcinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon userEPSS 0.2%CVE-2024-41811LOWipl/web susceptible to Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-24414MEDIUMIcinga for Windows certificate can have too-open permissionsEPSS 0.1%CVE-2026-24413MEDIUMIcinga has insecure permission of %ProgramData%\icinga2\var on WindowsEPSS 0.1%