{"id":"CVE-2016-0726","aliases":["EUVD-2016-0755","GHSA-rg2g-95pj-mc2p","openSUSE-SU-2024:11073-1"],"status":"published","title":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\"...","description":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02263,"percentile":0.83116,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2017-06-06T18:00:00Z","modified":"2026-06-17T00:38:06Z","affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-2.5"}]}],"bundled":17}],"products":[{"vendor":"nagios","product":"nagios"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295446","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0726"},{"url":"https://github.com/advisories/GHSA-rg2g-95pj-mc2p"},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13977","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-0726","description":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.","status":"published","published":"2017-06-06T18:00:00Z","modified":"2024-08-05T22:30:03.556Z","updated_at":"2026-11-02T14:33:37.12286Z"}],"euvd":[{"id":"EUVD-2016-0755","description":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.","status":"published","published":"2017-06-06T18:00:00Z","modified":"2024-08-05T22:30:03Z","updated_at":"2026-11-03T02:23:00.426765Z"}],"ghsa":[{"id":"GHSA-rg2g-95pj-mc2p","title":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\"...","description":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.","status":"published","published":"2022-05-17T02:40:32Z","modified":"2023-01-27T05:05:03Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:42:36.711116Z"}],"nvd":[{"id":"CVE-2016-0726","description":"The Fedora Nagios package uses \"nagiosadmin\" as the default password for the \"nagiosadmin\" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.","status":"published","published":"2017-06-06T18:29:00.277Z","modified":"2026-06-17T00:38:06.09Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:03:38.290327Z"}],"osv":[{"id":"openSUSE-SU-2024:11073-1","title":"nagios-4.4.6-2.5 on GA media","description":"These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.000922Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}