Nagios vulnerabilities
119 CVEs and advisories name Nagios as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-25122Nagios XI < 5.4.13 Component Download Page RCE
- CVE-2024-14005Nagios XI < 2024R1.2 Command Injection via Docker Wizard
- CVE-2020-36867Nagios XI < 5.7.3 Command Injection in Report PDF Download
- CVE-2021-47689Nagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages
- CVE-2021-47691Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page
- CVE-2022-50584Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows
- CVE-2020-36861Nagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages
- CVE-2021-47690Nagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals
- CVE-2020-36860Nagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages
- CVE-2022-50585Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input
- CVE-2020-36859Nagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages
- CVE-2021-47693Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text
- CVE-2021-47694Nagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command
- CVE-2013-10073Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection
- CVE-2013-10072Nagios XI < 2012R1.6 Auto-Discovery Missing Authorization
- CVE-2020-36857Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page
- CVE-2012-10063Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM
- CVE-2020-36856Nagios XI < 5.6.14 Authenticated RCE command_test.php via address
- CVE-2024-14002Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis
- CVE-2025-34284Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin
- CVE-2024-13995Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure
- CVE-2025-34283Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes
- CVE-2024-13994Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization
- CVE-2024-13999Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure
- CVE-2023-7319Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu
- CVE-2025-34278Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS
- CVE-2025-34280Nagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function
- CVE-2023-7321Nagios Log Server < 2.1.14 XSS via Snapshots Page
- CVE-2023-7323Nagios Log Server < 2024R1 XSS via Create User Function
- CVE-2020-36858Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages