https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:13:54.719910+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-61550 CVE-2026-61550 — Icinga 2: Improper access control for JSON-RPC update certificate messages 2026-09-28T13:13:54.721389+00:00

Affected: icinga2

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.