Nagios Enterprises, LLC

Products

ProductCVEsExploitedLatest
Nagios Core7–Aug 26, 2026
Nagios XI7–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-119742 High 7.2 Nagios XI < 2026R2 OS Command Injection via mibs.php 4.1%
  • CVE-2026-48549 Medium 6.5 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie 0.3%
  • CVE-2026-48549 Medium 6.5 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie 0.3%
  • CVE-2026-48548 Medium 6.5 Nagios Core CSRF via cmd.cgi 0.2%
  • CVE-2026-48554 High 7.5 Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution 1.0%
  • CVE-2026-48554 High 7.5 Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution 1.0%
  • CVE-2026-48553 High 7.5 Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection 1.0%
  • CVE-2026-48553 High 7.5 Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection 1.0%
  • CVE-2026-48552 Medium 5.4 Nagios Core / XI DOM-based XSS via jsonquery.js 0.3%
  • CVE-2026-48552 Medium 5.4 Nagios Core / XI DOM-based XSS via jsonquery.js 0.3%
  • CVE-2026-48551 High 7.4 Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie 0.3%
  • CVE-2026-48551 High 7.4 Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie 0.3%
  • CVE-2026-48550 Medium 6.1 Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter 0.4%
  • CVE-2026-48550 Medium 6.1 Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter 0.4%