By year
11
12
14
17
18
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-61552 Icinga 2 is an open source monitoring system.High 7.2 · Sep 18, 2026
- CVE-2026-61551 Icinga 2 is an open source monitoring system.High 8.6 · Sep 18, 2026
- CVE-2026-61550 Icinga 2 is an open source monitoring system.Critical 9.8 · Sep 18, 2026
- CVE-2026-42224 ipl/web is a set of common web components for php projects.High 7.6 · May 8, 2026
- CVE-2025-61908 Icinga 2 is an open source monitoring system.High 7.1 · Oct 16, 2025
- CVE-2025-61907 Icinga 2 is an open source monitoring system.High 7.1 · Oct 16, 2025
- CVE-2025-48057 Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.Critical 9.3 · May 27, 2025
- CVE-2025-27406 Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2.High 7.6 · Mar 26, 2025
- CVE-2025-27405 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.High 7.6 · Mar 26, 2025
- CVE-2025-27404 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.High 7.6 · Mar 26, 2025
- CVE-2024-49369 Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.Critical 9.8 · Nov 12, 2024
- CVE-2024-24820 Icinga Director is a tool designed to make Icinga 2 configuration handling easy.High 8.3 · Feb 8, 2024
- CVE-2022-24716 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.High 7.5 · Mar 8, 2022
- CVE-2022-24715 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.High 8.5 · Mar 8, 2022
- CVE-2021-37698 Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.High 7.5 · Aug 19, 2021
- CVE-2021-32743 Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.High 8.8 · Jul 15, 2021
- CVE-2021-32739 Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.High 8.8 · Jul 15, 2021
- CVE-2020-29663 Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL.Critical 9.1 · Dec 15, 2020
- CVE-2020-24368 Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readHigh 7.5 · Aug 19, 2020
- CVE-2020-14004 An issue was discovered in Icinga2 before v2.12.0-rc1.High 7.8 · Jun 12, 2020
- CVE-2018-18250 Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.High 7.5 · Dec 17, 2018
- CVE-2018-18249 Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attaCritical 9.8 · Dec 17, 2018
- CVE-2018-6535 An issue was discovered in Icinga 2.x through 2.8.1.High 8.1 · Feb 27, 2018
- CVE-2018-6533 An issue was discovered in Icinga 2.x through 2.8.1.High 7.8 · Feb 27, 2018
- CVE-2018-6532 An issue was discovered in Icinga 2.x through 2.8.1.High 7.5 · Feb 27, 2018
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.