PT-2026-5317 · Unknown+1 · Icinga For Windows+1

Julianbrost · Published 2026-01-29 · Updated 2026-02-19 · CVE-2026-24413

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.3.0 through 2.13.14 Icinga 2 versions 2.3.0 through 2.14.8 Icinga 2 versions 2.3.0 through 2.15.2

Description Icinga 2 is an open source monitoring system. The MSI installer did not configure appropriate permissions for the %ProgramData%icinga2var folder on Windows systems. This allowed all local users to read the folder's contents, including the private key of the user and synced configuration. All installations on Windows are affected.

Recommendations Icinga 2 versions prior to 2.13.14 should be upgraded. Icinga 2 versions prior to 2.14.8 should be upgraded. Icinga 2 versions prior to 2.15.2 should be upgraded. Upgrade Icinga for Windows to at least version v1.13.4. Upgrade Icinga for Windows to at least version v1.12.4. Upgrade Icinga for Windows to at least version v1.11.2. Manually update the ACL for the folder C:ProgramDataicinga2var (and C:Program FilesWindowsPowerShellmodulesicinga-powershell-frameworkcertificate) including every sub-folder and item to restrict access for general users, only allowing the Icinga service user and administrators access.

Exploit

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-24413

GHSA-88H5-RRM6-5973

GHSA-VFJG-6FPV-4MMR

OPENSUSE-SU-2026:10113-1

Affected Products

Icinga 2

Icinga For Windows

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24413.json · Exploit
• https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-24413 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24413 · Vendor Advisory
• https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-24413 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-24413 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10113-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-24413 · Vendor Advisory
• https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973 · Note
• https://t.me/cveNotify/152512 · Telegram Post
• https://suse.com/security/cve/CVE-2026-24413 · Note
• https://twitter.com/CVEnew/status/2016934794542670023 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016952733291413857 · Twitter Post