https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:20:19 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-61550 <p>Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.</p> <p>Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-61550 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-61550 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: icinga2, Ubuntu:18.04:LTS: icinga2, Ubuntu:20.04:LTS: icinga2, Ubuntu:22.04:LTS: icinga2, Ubuntu:24.04:LTS: icinga2, Ubuntu:26.04:LTS: icinga2</p> <p>Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-61550