Nagios Enterprises, LLC Nagios Core

• CVE-2026-48549 Medium 6.5 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie 0.3%
• CVE-2026-48548 Medium 6.5 Nagios Core CSRF via cmd.cgi 0.2%
• CVE-2026-48554 High 7.5 Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution 1.0%
• CVE-2026-48553 High 7.5 Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection 1.0%
• CVE-2026-48552 Medium 5.4 Nagios Core / XI DOM-based XSS via jsonquery.js 0.3%
• CVE-2026-48551 High 7.4 Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie 0.3%
• CVE-2026-48550 Medium 6.1 Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter 0.4%