Important: Icinga 2 security update
Type/Severity
NetEye Product Security has rated this update as having a critical security impact.
Topic
An update for the icinga package is now available for NetEye 4.
Security Fix for NetEye 4.48
2.15.5_neteye1.71.2-1
Summary
The vulnerabilities include an authentication bypass leading to privilege escalation via trusted CA impersonation, a stack-based buffer overflow, and an injection vulnerability.
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Affected Products
All NetEye 4.x versions
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://github.com/Icinga/icinga2/releases/tag/v2.15.4
Patrick Harasser
Author
Patrick Harasser
Related Content
Tags: Bug Fixes, Icinga 2, NetEye Updates, Security Advisory
Bug Fixes for NetEye 4.48
Fix Soft States Some checks that were actually failing showed up as green/OK in Icinga. The cause: two parts of the system stored the same status in different formats, so the web interface misread it and hid early-stage problems. A Read MoreBug Fixes for NetEye 4.48
Fix Director self-service api We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login Read MoreNetEye 4 – Security Advisory (Elastic Stack)
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the Kibana package is now available for NetEye 4. Security Fix for NetEye 4.48 9.4.3_neteye3.101.2-1 CVEs CVE-2026-56148CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56149CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56151CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H All Read MoreBug Fixes for NetEye 4.48
Fix Geo Map layers and maps deletion. We have resolved an issue in the Geo Map module that prevented users from deleting maps and layers through the web interface. List of updated packages To solve the issue mentioned above, the Read MoreSearch by technology
Contact
Categories
- AI(34)
- APM(82)
- Atlassian(78)
- Bug Fixes(512)
- Contribution(13)
- DDoS(1)
- Development(188)
- DevOps(82)
- Downloads / Release Notes(494)
- Events(186)
- Front-end(11)
- GLPI(8)
- Icinga Web 2(38)
- ITOA(91)
- Knowledge Management(14)
- Log-SIEM(208)
- Microsoft(21)
- NetEye(1,612)
- NetEye Extension Packs(5)
- Offensive Security(12)
- PHP(10)
- SEC4U(127)
- Service Management(300)
- UI(10)
- Uncategorized(1)
- Unified Monitoring(480)
- UX(7)