NNagios

Products

Exploited and recent CVEs

• CVE-2023-24035 Low 3.5 An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, 0.7%
• CVE-2023-24034 Low 3.1 An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability. 1.3%
• CVE-2026-2041 High 7.2 Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability 75.6%
• CVE-2026-2043 High 7.2 Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability 75.4%
• CVE-2026-2042 High 7.2 Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability 6.1%
• CVE-2025-34323 High 8.5 Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules 0.3%
• CVE-2025-34322 High 8.6 Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries 9.2%
• CVE-2021-47698 Medium 5.1 Nagios XI < 5.8.7 XSS in Core UI Views URL handling 0.4%
• CVE-2024-13997 Critical 9.4 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host 1.2%
• CVE-2024-13998 Medium 6.0 Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure 1.0%
• CVE-2024-13992 Medium 5.1 Nagios XI < 2024R1.1 XSS via Missing Page / 404 0.6%
• CVE-2021-47697 Medium 5.1 Nagios XI < 5.8.0 XSS via Views URL Handling 0.4%
• CVE-2021-47695 Medium 5.1 Nagios XI < 5.8.0 XSS via My Tools Page 0.4%
• CVE-2020-36866 Medium 5.1 Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface 0.4%
• CVE-2023-7316 Medium 5.1 Nagios XI < 2024R1 XSS via Graph Explorer 0.6%
• CVE-2023-7315 Medium 5.1 Nagios XI < 5.11.3 XSS via Graph Explorer 0.5%
• CVE-2024-14001 Medium 5.1 Nagios XI < 2024R1.1.3 XSS via Executive Summary Report 0.6%
• CVE-2020-36864 Medium 5.1 Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting 0.4%
• CVE-2023-7318 Medium 5.1 Nagios XI < 2024R1.0.2 XSS via Core Command Expansion 0.6%
• CVE-2024-14000 Medium 5.1 Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report 0.6%
• CVE-2023-7313 Medium 5.1 Nagios XI < 5.11.3 XSS via Bulk Modifications 0.5%
• CVE-2020-36865 Medium 5.1 Nagios XI < 5.7.2 XSS via BPI Config Management 0.4%
• CVE-2021-47696 Medium 5.1 Nagios XI < 5.8.0 XSS via BPI Config ID Handling 0.4%
• CVE-2023-7314 Medium 5.1 Nagios XI < 5.11.3 XSS via Bandwidth Report 0.5%
• CVE-2021-47699 Medium 5.1 Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form 0.4%
• CVE-2023-53688 Medium 5.1 Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay 0.3%
• CVE-2023-7317 Critical 9.4 Nagios XI < 2024R1 Web SSH Terminal Missing Access Control 1.7%
• CVE-2020-36863 High 8.7 Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory 1.4%
• CVE-2020-36862 Medium 6.9 Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts 0.6%
• CVE-2022-50587 Medium 5.1 Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text 0.4%