WID-SEC-W-2026-0260

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Icinga: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2026-01-29

Ein lokaler Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-24414USmedium5.5OT elevated—
The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior to 1.13.4, 1.12.4, an…
CVE-2026-24413USmedium5.5OT elevated—
Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan