CVE-2026-61637

The monitoring platform Icinga Web 2 is vulnerable to an open redirect on the login page in versions prior to 2.12.7 and 2.13.1 . An attacker can craft a malicious URL that, when accessed by an authenticated user (or one capable of authenticating), allows the attacker to manipulate the backend to...