PT-2026-5317 · Unknown+1 · Icinga For Windows+1

Julianbrost · Publicado 2026-01-29 · Atualizado 2026-02-19 · CVE-2026-24413

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Média

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.3.0 through 2.13.14 Icinga 2 versions 2.3.0 through 2.14.8 Icinga 2 versions 2.3.0 through 2.15.2

Description Icinga 2 is an open source monitoring system. The MSI installer did not configure appropriate permissions for the %ProgramData%icinga2var folder on Windows systems. This allowed all local users to read the folder's contents, including the private key of the user and synced configuration. All installations on Windows are affected.

Recommendations Icinga 2 versions prior to 2.13.14 should be upgraded. Icinga 2 versions prior to 2.14.8 should be upgraded. Icinga 2 versions prior to 2.15.2 should be upgraded. Upgrade Icinga for Windows to at least version v1.13.4. Upgrade Icinga for Windows to at least version v1.12.4. Upgrade Icinga for Windows to at least version v1.11.2. Manually update the ACL for the folder C:ProgramDataicinga2var (and C:Program FilesWindowsPowerShellmodulesicinga-powershell-frameworkcertificate) including every sub-folder and item to restrict access for general users, only allowing the Icinga service user and administrators access.

Exploit

Correção

LPE

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2026-24413

GHSA-88H5-RRM6-5973

GHSA-VFJG-6FPV-4MMR

OPENSUSE-SU-2026:10113-1

Produtos afetados

Icinga 2

Icinga For Windows

Referências · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24413.json · Exploit
• https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr · Aviso do Fabricante
• https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973 · Nota
• https://t.me/cveNotify/152512 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-24413 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-24413 · Nota
• https://osv.dev/vulnerability/CVE-2026-24413 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2016934794542670023 · Publicação no Twitter
• https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-24413 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-24413 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2026:10113-1 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2016952733291413857 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2026-24413 · Aviso do Fabricante