LOWCVSS v3.1 3.5Vulnerability
CVE-2026-61637
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Prior to versions 2.12.7 and 2.13.1, an attacker can craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. For this to succeed, the victim's locale in Icinga Web must be different from en_US. This issue has been patched in versions 2.12.7 and 2.13.1.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- LOW
- Cvss score
- 3.5
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 3.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-61637
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-11-11T19:44:24+00:00
- Name
- CVE-2026-61637
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- Published at
- 2026-11-11T19:17:42.887
- Last modified
- 2026-11-11T19:17:42.887
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph