CVE-2016-0726
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin"...
CVE-2016-0726 is a critical vulnerability (CVSS 9.8) in Nagios, published June 6, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.26%, the 83rd percentile. Fixed in nagios 4.4.6-2.5.
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
- Record
CVE-2016-0726- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-798
- Updated
- 2026-11-02
CVE List No score
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
- Record
CVE-2016-0726- Updated
- 2026-11-02
EUVDEUVD-2016-0755 No score
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
- Record
EUVD-2016-0755- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rg2g-95pj-mc2p
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin"...
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
- Record
GHSA-rg2g-95pj-mc2p- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11073-1 No score
nagios-4.4.6-2.5 on GA media
These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11073-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nagiosopenSUSE:Tumbleweed |
before 4.4.6-2.5 | 4.4.6-2.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=1295446
nvd.nist.gov/vuln/detail/CVE-2016-0726
github.com/advisories/GHSA-rg2g-95pj-mc2p
suse.com/security/cve/CVE-2006-2162
Show 14 moreShow less