Nagios Enterprises, LLC Nagios XI

• CVE-2026-119742 High 7.2 Nagios XI < 2026R2 OS Command Injection via mibs.php 4.1%
• CVE-2026-48549 Medium 6.5 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie 0.3%
• CVE-2026-48554 High 7.5 Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution 1.0%
• CVE-2026-48553 High 7.5 Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection 1.0%
• CVE-2026-48552 Medium 5.4 Nagios Core / XI DOM-based XSS via jsonquery.js 0.3%
• CVE-2026-48551 High 7.4 Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie 0.3%
• CVE-2026-48550 Medium 6.1 Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter 0.4%