<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: icinga2</title><description>Every new CVE for icinga2.</description><link>https://agentprime.io/</link><item><title>CVE-2026-61552: Icinga 2 DSL Injection via Unescaped Import Template Name</title><link>https://agentprime.io/advisories/CVE-2026-61552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-61552/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 17:24:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-61551: Icinga 2: Stack overflow via deeply nested JSON objects</title><link>https://agentprime.io/advisories/CVE-2026-61551/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-61551/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 17:23:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-61550: Icinga 2: Improper access control for JSON-RPC update certificate messages</title><link>https://agentprime.io/advisories/CVE-2026-61550/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-61550/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 17:21:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-24413: Icinga has insecure permission of %ProgramData%\icinga2\var on Windows</title><link>https://agentprime.io/advisories/CVE-2026-24413/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24413/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Jan 2026 17:21:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61909: Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user</title><link>https://agentprime.io/advisories/CVE-2025-61909/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61909/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Oct 2025 17:20:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61908: Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference</title><link>https://agentprime.io/advisories/CVE-2025-61908/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61908/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Oct 2025 17:16:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61907: Icinga 2 API users could access restricted values in filter expressions</title><link>https://agentprime.io/advisories/CVE-2025-61907/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61907/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Oct 2025 17:11:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-48057: Icinga 2 certificate renewal might incorrectly renew an invalid certificate</title><link>https://agentprime.io/advisories/CVE-2025-48057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-48057/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 May 2025 16:32:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-49369: Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections</title><link>https://agentprime.io/advisories/CVE-2024-49369/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49369/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Nov 2024 16:44:01 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-37698: Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer</title><link>https://agentprime.io/advisories/CVE-2021-37698/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-37698/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Aug 2021 13:55:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32743: Passwords used to access external services inadvertently exposed through API</title><link>https://agentprime.io/advisories/CVE-2021-32743/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32743/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Jul 2021 16:05:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32739: Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities</title><link>https://agentprime.io/advisories/CVE-2021-32739/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32739/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Jul 2021 14:55:11 GMT</pubDate><category>CVE</category></item></channel></rss>