Nagios

Vulnerability activity for Nagios: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 2
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 10
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25298Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Added to KEV Jan 18, 2022 · 337 days after publicationExploited74% likelyExploit codeMetasploit · NucleiDetection
8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25297Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Added to KEV Jan 18, 2022 · 337 days after publicationExploited57% likelyExploit codeMetasploit · NucleiDetection
8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25296Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Added to KEV Jan 18, 2022 · 337 days after publicationExploited72% likelyExploit codeMetasploit · NucleiDetection
8.8HighSep 5, 2019Nagios XI Code / command injectionCVE-2019-15949Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.Added to KEV Nov 3, 2021 · 789 days after publicationExploited77% likelyExploit codeExploit-DB · MetasploitDetection

Recent

3.5LowSep 14, 2026Nagios XICVE-2023-24035An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the comparison.
3.1LowSep 14, 2026Nagios XICVE-2023-24034An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability.
8.8HighFeb 20, 2026nagios xi Code / command injectionCVE-2026-2043Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the esensors_websensor_configwizard_func method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage75% likely
8.8HighFeb 20, 2026nagios xi Code / command injectionCVE-2026-2042Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the monitoringwizard module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in t6.1% likely
8.8HighFeb 20, 2026nagios xi Code / command injectionCVE-2026-2041Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the zabbixagent_configwizard_func method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerab76% likely
8.8HighDec 29, 2025nagios xi SQL injectionCVE-2025-67255In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.1.1% likely
7.5HighDec 29, 2025nagios xi Path traversal / file handlingCVE-2025-67254NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php.2% likely
6.7MediumDec 16, 2025nagios xi Privilege escalationCVE-2025-34288Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Succ1.9% likely
7.8HighNov 17, 2025Nagios log server Privilege escalationCVE-2025-34323Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to '/usr/local/nagioslogserver/scripts', while several scripts in this directory are owned by root and may be executed via sudo without a password. A local attacker running as 'www-data' can move one of these root-owned scripts to a backup
7.2HighNov 17, 2025Nagios log server Code / command injectionCVE-2025-34322Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the global configuration and concatenated into a shell command that is executed via shell_exec() without proper input handling or command-line argument sanitation. An authenticated user with access to the 'Gl9.2% likely
6.5MediumNov 3, 2025nagios xi Information disclosureCVE-2024-13998Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data. Exposure of API keys or password hashes could lead to account compromise, abuse of API privileges, or offline cracking attempts. CVE-2024-13995 addresses a similar vulnerability with a potentially incomplete fix for the underlying problem in earlier versions.1% likely
7.2HighNov 3, 2025nagios xi Privilege escalationCVE-2024-13997Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system.1.2% likely
5.4MediumNov 3, 2025nagios xi XSSCVE-2021-47698Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via the Core UI’s Views URL handling (escape_string()). Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.
8.6HighOct 27, 2025Nagios fusionCVE-2025-60425Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.Exploit code
7.6HighOct 27, 2025Nagios fusion Auth bypass / access controlCVE-2025-60424A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.Exploit code
8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25298Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Exploited74% likelyExploit codeMetasploit · NucleiDetection
8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25297Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Exploited57% likelyExploit codeMetasploit · NucleiDetection
8.8HighFeb 15, 2021Nagios XI Code / command injectionCVE-2021-25296Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.Exploited72% likelyExploit codeMetasploit · NucleiDetection
8.8HighSep 5, 2019Nagios XI Code / command injectionCVE-2019-15949Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.Exploited77% likelyExploit codeExploit-DB · MetasploitDetection

See every Nagios entry on the dashboard.