CVE-2026-61551
- Source
- https://cve.org/CVERecord?id=CVE-2026-61551
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-61551.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-61551
- Aliases
-
- GHSA-wh38-wg57-5w7g
- Downstream
- Published
- 2026-09-18T17:23:11Z
- Modified
- 2026-09-26T08:08:50Z
- Severity
-
- 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
- Summary
- Icinga 2: Stack overflow via deeply nested JSON objects
- Details
-
Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port 5665, allowing a remote attacker to crash the process, while possible code execution has not been demonstrated. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-674" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61551.json" }- References
-
- https://github.com/Icinga/icinga2/releases/tag/v2.14.9
- https://github.com/Icinga/icinga2/releases/tag/v2.15.4
- https://github.com/Icinga/icinga2/releases/tag/v2.16.2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61551.json
- https://github.com/Icinga/icinga2/security/advisories/GHSA-wh38-wg57-5w7g
- https://nvd.nist.gov/vuln/detail/CVE-2026-61551
- https://github.com/Icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee
- https://github.com/Icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137
- https://github.com/Icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89
- https://github.com/Icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d
- https://github.com/Icinga/icinga2/pull/10908
- https://icinga.com/blog/icinga2-security-release-v2-16-2
Affected packages
Git / github.com/icinga/icinga2
Affected ranges
- Type
- GIT
- Repo
- https://github.com/icinga/icinga2
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedIntroducedIntroducedFixedFixedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0" }, { "fixed": "2.14.9" }, { "introduced": "2.15.0" }, { "fixed": "2.15.4" }, { "introduced": "2.16.0" }, { "fixed": "2.16.2" } ], "source": [ "AFFECTED_FIELD", "REFERENCES" ] }
Affected versions
v0.*
v0.0.1
v0.0.10
v0.0.11
v0.0.2
v0.0.3
v0.0.4
v0.0.5
v0.0.6
v0.0.7
v0.0.8
v0.0.9
v2.*
v2.0.0
v2.0.0-beta1
v2.0.0-beta2
v2.0.1
v2.0.2
v2.1.0
v2.1.1
v2.10.0
v2.10.1
v2.11.0
v2.11.0-rc1
v2.12.0
v2.12.0-rc1
v2.13.0
v2.14.0
v2.14.1
v2.14.2
v2.14.4
v2.14.5
v2.15.0
v2.15.3
v2.16.0
v2.16.1
v2.2.0
v2.3.0
v2.4.0
v2.5.0
v2.6.0
v2.6.1
v2.7.0
v2.9.0
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-61551.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"200191433764858794205054045558640830751",
"117861291485466180029131537659474604948",
"191198791494161765165218212660385102989",
"159824344991490469681993502463862994971"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-008ef7bb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/cli/objectlistutility.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251404385401286579297616705145407389912"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-02bd6a4e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "test/base-json.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264110854959877572819316369279722791018",
"204229890249994878806812780837241714935",
"220164289499673882259642556724257829579",
"262991501836058891147402807021675276228"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-05d3893f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/configobject.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336487096509243571510391426458357575231",
"length": 245
},
"id": "CVE-2026-61551-06d80773",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/remote/jsonrpc.cpp",
"function": "JsonRpc::DecodeMessage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264110854959877572819316369279722791018",
"204229890249994878806812780837241714935",
"220164289499673882259642556724257829579",
"262991501836058891147402807021675276228"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-0e6019de",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/configobject.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272939900236098573444911862964434376776",
"length": 221
},
"id": "CVE-2026-61551-0f9d9273",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/json.cpp",
"function": "icinga::JsonDecode"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "7621377224758604725523651516357609579",
"length": 524
},
"id": "CVE-2026-61551-17e00d58",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/configobject.cpp",
"function": "ConfigObject::RestoreObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "7621377224758604725523651516357609579",
"length": 524
},
"id": "CVE-2026-61551-1e3db160",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/configobject.cpp",
"function": "ConfigObject::RestoreObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "296515076291750321107193163536293250443",
"length": 1260
},
"id": "CVE-2026-61551-21195fa8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/cli/objectlistutility.cpp",
"function": "ObjectListUtility::PrintObject"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"269308167456455972925175941367954118461",
"304326100548295600230948539536713845312",
"290853586007460448112000437819723945688",
"45320774750785144301802549040317125866"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-24050eb8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/remote/jsonrpc.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264110854959877572819316369279722791018",
"204229890249994878806812780837241714935",
"220164289499673882259642556724257829579",
"262991501836058891147402807021675276228"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-25561477",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/configobject.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272939900236098573444911862964434376776",
"length": 221
},
"id": "CVE-2026-61551-28ce5d4a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/json.cpp",
"function": "icinga::JsonDecode"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264110854959877572819316369279722791018",
"204229890249994878806812780837241714935",
"220164289499673882259642556724257829579",
"262991501836058891147402807021675276228"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-348c0236",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/configobject.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67571206220603494759141413601960757685",
"322928944812586467105654141492971913221",
"31619094853315450469905085468400126216",
"91827026491121626318146976953226956623",
"230687592166134425180581617324671617592"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-44dfac62",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/json.hpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"205494572313847014643658339441210553034",
"103708368219314239687557470960449645052",
"85640158082713883874853503432797364276",
"127202408424516902058036195413576529819"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-49208477",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/json.hpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"269308167456455972925175941367954118461",
"304326100548295600230948539536713845312",
"290853586007460448112000437819723945688",
"45320774750785144301802549040317125866"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-49abf385",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/remote/jsonrpc.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "296515076291750321107193163536293250443",
"length": 1260
},
"id": "CVE-2026-61551-53fff481",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/cli/objectlistutility.cpp",
"function": "ObjectListUtility::PrintObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336487096509243571510391426458357575231",
"length": 245
},
"id": "CVE-2026-61551-5525b8ca",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/remote/jsonrpc.cpp",
"function": "JsonRpc::DecodeMessage"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272818820689123925978804833057242342394",
"length": 161
},
"id": "CVE-2026-61551-6cca9adc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_object"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"269308167456455972925175941367954118461",
"304326100548295600230948539536713845312",
"290853586007460448112000437819723945688",
"45320774750785144301802549040317125866"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-6f823bf7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/remote/jsonrpc.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272818820689123925978804833057242342394",
"length": 161
},
"id": "CVE-2026-61551-72f22bd2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_object"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"249986448687876019187100887928205890677",
"87313269734335912412892027609482115097",
"235713521754124228750018175812149498705",
"230570791720225748328121644919203073588",
"119034321431886119361644544299283219881",
"67302124771510403175330797078045385677",
"178169218151998635735090074514137527067",
"262648566719568550159185113514973115590",
"64307684662357165152067996057556248029",
"197438825783466225647555188566016282708",
"150516165026815857750286229621630893416",
"205485921757704093030275850618546100691",
"74308064263835097843999622526540474484",
"203659730875682741959421930352371803351",
"265977155715696366284443587706332802321",
"71567693030125904665821084907914475358",
"215099292055824958319962704761816537234",
"134151920769948378858575475818744447482",
"229241764676145755140009668115932244026",
"21320619403340011084530950376161361903",
"35532049573097405417171654674721978303"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-73deb919",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/json.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251404385401286579297616705145407389912"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-7470dab2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "test/base-json.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"202184964169406351949254665923402612550",
"87313269734335912412892027609482115097",
"235713521754124228750018175812149498705",
"230570791720225748328121644919203073588",
"119034321431886119361644544299283219881",
"67302124771510403175330797078045385677",
"178169218151998635735090074514137527067",
"339580487507489876962248640411452017454",
"110142759496815048456539796003650728653",
"73171702076428542935691223430677620301",
"150516165026815857750286229621630893416",
"205485921757704093030275850618546100691",
"74308064263835097843999622526540474484",
"203659730875682741959421930352371803351",
"265977155715696366284443587706332802321",
"71567693030125904665821084907914475358",
"215099292055824958319962704761816537234",
"134151920769948378858575475818744447482",
"229241764676145755140009668115932244026",
"21320619403340011084530950376161361903",
"35532049573097405417171654674721978303"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-78d00bc7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/json.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "7621377224758604725523651516357609579",
"length": 524
},
"id": "CVE-2026-61551-7db50c1b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/configobject.cpp",
"function": "ConfigObject::RestoreObject"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"200191433764858794205054045558640830751",
"117861291485466180029131537659474604948",
"191198791494161765165218212660385102989",
"159824344991490469681993502463862994971"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-8cc62baf",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/cli/objectlistutility.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251404385401286579297616705145407389912"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-8f9398df",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "test/base-json.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"202184964169406351949254665923402612550",
"87313269734335912412892027609482115097",
"235713521754124228750018175812149498705",
"230570791720225748328121644919203073588",
"119034321431886119361644544299283219881",
"67302124771510403175330797078045385677",
"178169218151998635735090074514137527067",
"339580487507489876962248640411452017454",
"110142759496815048456539796003650728653",
"73171702076428542935691223430677620301",
"150516165026815857750286229621630893416",
"205485921757704093030275850618546100691",
"74308064263835097843999622526540474484",
"203659730875682741959421930352371803351",
"265977155715696366284443587706332802321",
"71567693030125904665821084907914475358",
"215099292055824958319962704761816537234",
"134151920769948378858575475818744447482",
"229241764676145755140009668115932244026",
"21320619403340011084530950376161361903",
"35532049573097405417171654674721978303"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-9e3ab254",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/json.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "296515076291750321107193163536293250443",
"length": 1260
},
"id": "CVE-2026-61551-a3d20db4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/cli/objectlistutility.cpp",
"function": "ObjectListUtility::PrintObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "7621377224758604725523651516357609579",
"length": 524
},
"id": "CVE-2026-61551-b183e498",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/configobject.cpp",
"function": "ConfigObject::RestoreObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272939900236098573444911862964434376776",
"length": 221
},
"id": "CVE-2026-61551-b1904bc2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/json.cpp",
"function": "icinga::JsonDecode"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "294989828705712170264032340437782524244",
"length": 160
},
"id": "CVE-2026-61551-b472fcbe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_array"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272939900236098573444911862964434376776",
"length": 221
},
"id": "CVE-2026-61551-be9e1f1d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/json.cpp",
"function": "icinga::JsonDecode"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "296515076291750321107193163536293250443",
"length": 1260
},
"id": "CVE-2026-61551-c3b1b78c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/cli/objectlistutility.cpp",
"function": "ObjectListUtility::PrintObject"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336487096509243571510391426458357575231",
"length": 245
},
"id": "CVE-2026-61551-c66abfed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/remote/jsonrpc.cpp",
"function": "JsonRpc::DecodeMessage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"249986448687876019187100887928205890677",
"87313269734335912412892027609482115097",
"235713521754124228750018175812149498705",
"230570791720225748328121644919203073588",
"119034321431886119361644544299283219881",
"67302124771510403175330797078045385677",
"178169218151998635735090074514137527067",
"262648566719568550159185113514973115590",
"64307684662357165152067996057556248029",
"197438825783466225647555188566016282708",
"150516165026815857750286229621630893416",
"205485921757704093030275850618546100691",
"74308064263835097843999622526540474484",
"203659730875682741959421930352371803351",
"265977155715696366284443587706332802321",
"71567693030125904665821084907914475358",
"215099292055824958319962704761816537234",
"134151920769948378858575475818744447482",
"229241764676145755140009668115932244026",
"21320619403340011084530950376161361903",
"35532049573097405417171654674721978303"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-c8500e09",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/json.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "294989828705712170264032340437782524244",
"length": 160
},
"id": "CVE-2026-61551-c9543d0a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_array"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"205494572313847014643658339441210553034",
"103708368219314239687557470960449645052",
"85640158082713883874853503432797364276",
"127202408424516902058036195413576529819"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-ca108ab9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/json.hpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251404385401286579297616705145407389912"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-ce15055d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "test/base-json.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"200191433764858794205054045558640830751",
"117861291485466180029131537659474604948",
"191198791494161765165218212660385102989",
"159824344991490469681993502463862994971"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-d28bb2b0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/cli/objectlistutility.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "294989828705712170264032340437782524244",
"length": 160
},
"id": "CVE-2026-61551-d3401c9e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_array"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272818820689123925978804833057242342394",
"length": 161
},
"id": "CVE-2026-61551-daff0036",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_object"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "294989828705712170264032340437782524244",
"length": 160
},
"id": "CVE-2026-61551-dcf01c8b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_array"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"269308167456455972925175941367954118461",
"304326100548295600230948539536713845312",
"290853586007460448112000437819723945688",
"45320774750785144301802549040317125866"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-e00c8d66",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/remote/jsonrpc.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336487096509243571510391426458357575231",
"length": 245
},
"id": "CVE-2026-61551-e373dfe1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/4964d2444ca5c4fae9036054554e1c6e0025fb89",
"target": {
"file": "lib/remote/jsonrpc.cpp",
"function": "JsonRpc::DecodeMessage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"200191433764858794205054045558640830751",
"117861291485466180029131537659474604948",
"191198791494161765165218212660385102989",
"159824344991490469681993502463862994971"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-e9a98b52",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/3d9166ff52ff1a64a286c39af57957d63442c137",
"target": {
"file": "lib/cli/objectlistutility.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272818820689123925978804833057242342394",
"length": 161
},
"id": "CVE-2026-61551-ec51c323",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/391504eaa9ed9aee81f84008c57ec821974b74ee",
"target": {
"file": "lib/base/json.cpp",
"function": "JsonSax::start_object"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67571206220603494759141413601960757685",
"322928944812586467105654141492971913221",
"31619094853315450469905085468400126216",
"91827026491121626318146976953226956623",
"230687592166134425180581617324671617592"
],
"threshold": 0.9
},
"id": "CVE-2026-61551-f01992f6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/icinga/icinga2/commit/ed163a8aa9d296820dd2ad14c47bf3f6a3fcce7d",
"target": {
"file": "lib/base/json.hpp"
}
}
]
vanir_signatures_modified
"2026-09-26T08:08:50Z"