Nagios vulnerabilities
119 CVEs and advisories name Nagios as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-24035An issue was discovered in Nagios XI before 5.9.3.
- CVE-2023-24034An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3.
- CVE-2026-2041Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
- CVE-2026-2043Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
- CVE-2026-2042Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
- CVE-2025-34323Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules
- CVE-2025-34322Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries
- CVE-2021-47698Nagios XI < 5.8.7 XSS in Core UI Views URL handling
- CVE-2024-13997Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host
- CVE-2024-13998Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure
- CVE-2024-13992Nagios XI < 2024R1.1 XSS via Missing Page / 404
- CVE-2011-10037Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks
- CVE-2021-47697Nagios XI < 5.8.0 XSS via Views URL Handling
- CVE-2018-25121Nagios XI < 5.4.13 XSS via Views Page
- CVE-2013-10074Nagios XI < 2012R2.6 XSS via Tools Menu
- CVE-2011-10040Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
- CVE-2016-15051Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields
- CVE-2011-10038Nagios XI < 2011R1.9 XSS via Recurring Downtime Script
- CVE-2021-47695Nagios XI < 5.8.0 XSS via My Tools Page
- CVE-2016-15053Nagios XI < 5.2.4 XSS via “My Reports” Listing
- CVE-2016-15052Nagios XI < 5.2.4 XSS via Menu System
- CVE-2020-36866Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface
- CVE-2023-7316Nagios XI < 2024R1 XSS via Graph Explorer
- CVE-2023-7315Nagios XI < 5.11.3 XSS via Graph Explorer
- CVE-2024-14001Nagios XI < 2024R1.1.3 XSS via Executive Summary Report
- CVE-2020-36864Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting
- CVE-2023-7318Nagios XI < 2024R1.0.2 XSS via Core Command Expansion
- CVE-2024-14000Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report
- CVE-2023-7313Nagios XI < 5.11.3 XSS via Bulk Modifications
- CVE-2020-36865Nagios XI < 5.7.2 XSS via BPI Config Management