CVE-2026-61550

Summary

The flaw allows an unauthenticated attacker to replace node and CA certificates, enabling them to impersonate trusted nodes and gain control over them.

Exploitability

Exploitation is relatively straightforward as it requires an attacker to connect to the Icinga 2 JSON-RPC endpoint on TCP port 5665. The attacker must have network access to the Icinga 2 server.

Blast radius

If exploited, the attacker can take full control of the affected Icinga 2 node, potentially leading to unauthorized access and manipulation of monitored systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Icinga 2 version 2.14.9, 2.15.4, or 2.16.2.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.