CVE-2025-61908 | Icinga icinga2 up to 2.13.12/2.14.6/2.15.0 API Endpoint null pointer dereference (GHSA-v9jg-xqhj-f43g)

October 16, 2025 Yanac

A vulnerability classified as problematic has been found in Icinga icinga2 up to 2.13.12/2.14.6/2.15.0. This vulnerability affects unknown code of the component API Endpoint. The manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2025-61908. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More