icinga-dashboard-exposure: Icinga Exposed Dashboard

2026-01-16 Icinga Dashboard PoC Public

Description

Icinga Dashboard was exposed.

PoC

id: icinga-dashboard-exposure

info:
  name: Icinga Exposed Dashboard
  author: DhiyaneshDk
  severity: medium
  description: |
    Icinga Dashboard was exposed.
  reference:
    - https://icinga.com/
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"icinga" html:"Statistics"
  tags: exposure,icinga,statistics,oos,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/icinga2"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "Statistics", "Icinga")'
        condition: and
# digest: 4b0a00483046022100c19d26791175170addc0ee9e3c3cd137ddb1f8e7500ec4c2d376a0b1d36c9040022100b2eed8cf4ce1362d6d5c905cc9e27e8aa309d5ed2d39acb82967347ccada4f3e:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/icinga-dashboard-exposure.yaml

References

Related Vulnerabilities