PT-2026-5318 · Unknown+1 · Icinga-Powershell-Framework+1

Julianbrost · Published 2026-01-29 · Updated 2026-01-29 · CVE-2026-24414

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Icinga PowerShell Framework versions prior to 1.13.4 Icinga PowerShell Framework versions prior to 1.12.4 Icinga PowerShell Framework versions prior to 1.11.2

Description The Icinga PowerShell Framework allows configuration and monitoring of Windows environments. Versions prior to 1.13.4, 1.12.4, and 1.11.2 have permissions set on the certificate directory that grant all users read access. This exposes the private key of the Icinga certificate for the host. The affected directory is located at C:Program FilesWindowsPowerShellmodulesicinga-powershell-frameworkcertificate. All installations are affected.

Recommendations Versions prior to 1.13.4: Upgrade to version 1.13.4 or later. Versions prior to 1.12.4: Upgrade to version 1.12.4 or later. Versions prior to 1.11.2: Upgrade to version 1.11.2 or later. As a workaround, restrict access to the C:Program FilesWindowsPowerShellmodulesicinga-powershell-frameworkcertificate directory and its subfolders, allowing only the Icinga service user and administrators access. Additionally, restrict access to the C:ProgramDataicinga2var directory and its subfolders to address a similar issue in Icinga 2.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-24414

GHSA-88H5-RRM6-5973

GHSA-VFJG-6FPV-4MMR

Affected Products

Icinga 2

Icinga-Powershell-Framework

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24414.json · Exploit
• https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24414 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24414 · Vendor Advisory
• https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr · Note
• https://twitter.com/CVEnew/status/2016934791745032427 · Twitter Post
• https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2 · Note