Sploitus

15 exploited vulnerabilities in Icinga Web 2

Vulnerabilities with publicly known exploits

Vendors
Icinga, Suse, Debian, Unknown, Alt Linux
With known exploits
15
Affected Icinga Icinga Web 2 versions
< 2.6.2, 2.8.6, 2.9.6, 2.11.5, 2.12.3, 2.6.4, 2.7.4, 2.8.2, 2.6.1
Affected Icinga versions
< 2.7.5, 2.8.3

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2018-18249
CVSS 9.8 CRITICAL 2018-12-17FIX AVAILABLE
CVE-2022-24715 8 exploits
CVSS 8.8 HIGH 2022-03-08FIX AVAILABLE
CVE-2022-24716 13 exploits
CVSS 7.5 HIGH 2022-02-10FIX AVAILABLE
CVE-2025-27405
CVSS 7.6 HIGH 2025-03-26FIX AVAILABLE
CVE-2025-27404
CVSS 7.6 HIGH 2025-03-26FIX AVAILABLE
CVE-2020-24368
CVSS 7.5 HIGH 2020-08-19FIX AVAILABLE
CVE-2018-18250
CVSS 7.5 HIGH 2018-12-17FIX AVAILABLE
CVE-2021-32747
CVSS 6.5 MEDIUM 2021-07-12FIX AVAILABLE
CVE-2018-18246
CVSS 6.5 MEDIUM 2018-12-17FIX AVAILABLE
CVE-2021-32746
CVSS 5.3 MEDIUM 2021-07-12FIX AVAILABLE
CVE-2025-30164
CVSS 6.1 MEDIUM 2025-03-26FIX AVAILABLE
CVE-2018-18248
CVSS 6.1 MEDIUM 2018-12-17
CVE-2025-27609
CVSS 5.4 MEDIUM 2025-03-26FIX AVAILABLE
CVE-2018-18247
CVSS 5.4 MEDIUM 2018-12-17FIX AVAILABLE
CVE-2022-24714
CVSS 5.3 MEDIUM 2022-03-08FIX AVAILABLE