https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:29:27.487927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225286 EUVD-2026-225286 2026-10-03T04:29:27.551443+00:00 EUVD-2026-225286 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27404 fkie_cve-2025-27404 2026-10-03T04:29:27.551480+00:00

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14931-1 openSUSE-SU-2025:14931-1 — icingacli-2.12.4-1.1 on GA media 2026-10-03T04:29:27.551516+00:00

icingacli-2.12.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-27404 UBUNTU-CVE-2025-27404 2026-10-03T04:29:27.551539+00:00

Affected: Ubuntu:16.04:LTS: icingaweb2, Ubuntu:18.04:LTS: icingaweb2, Ubuntu:20.04:LTS: icingaweb2, Ubuntu:22.04:LTS: icingaweb2, Ubuntu:24.04:LTS: icingaweb2, Ubuntu:25.10: icingaweb2

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0639 WID-SEC-W-2025-0639 — Icinga: Mehrere Schwachstellen 2026-10-03T04:29:27.551569+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Icinga ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.