CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- nagios xiNagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts6.9 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text5.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via BPI Info URL5.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS in Update Checking5.1 Medium
- nagios xiNagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page8.7 High
- nagios xiNagios XI < 5.2.4 SQL Injection in Notification Search8.7 High
- nagios xiNagios XI < 2024R1.1.3 Session Not Invalidated After Password Change9.2 Critical
- nagios xiNagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers5.1 Medium
- nagios xiNagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality5.1 Medium
- nagios xiNagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard9.4 Critical
- nagios xiNagios XI < 2026R1 RCE via Run Check Command in CCM9.4 Critical
- nagios xiNagios XI < 2024R1.2 RCE via NRDP Server Plugins9.4 Critical
- nagios xiNagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)9.4 Critical
- nagios xiNagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE7.3 High
- nagios xiNagios XI < 2024R1.0.1 Privilege Escalation via System Profile9.4 Critical
- nagios xiNagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)8.7 High
- nagios xiNagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component8.5 High
- nagios xiNagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script8.5 High
- nagios xiNagios XI < 2024R2 Privilege Escalation via process_perfdata.pl8.4 High
- nagios xiNagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files5.1 Medium
- nagios xiNagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory8.5 High
- nagios xiNagios XI < 2024R1.2.2 Host Header Injection8.8 High
- nagios xiNagios XI < 5.4.13 Component Download Page RCE8.7 High
- nagios xiNagios XI < 2024R1.2 Command Injection via Docker Wizard9.4 Critical
- nagios xiNagios XI < 5.7.3 Command Injection in Report PDF Download8.7 High
- nagios xiNagios XI < 5.8.0 Core Config Manager (CCM) XSS via Templates Pages5.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Services Page5.1 Medium
- nagios xiNagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows5.1 Medium
- nagios xiNagios XI < 5.7.5 Core Config Manager (CCM) XSS via Overlay Rendering and Notification/Check Period Pages5.1 Medium
- nagios xiNagios XI < 5.8.2 Core Config Manager (CCM) XSS via Overlay Modals5.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) XSS via Object Edit Pages5.1 Medium
- nagios xiNagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input5.1 Medium
- nagios xiNagios XI < 5.7.4 Core Config Manager (CCM) SQL Injection via Object Edit Pages8.7 High
- nagios xiNagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search Text8.7 High
- nagios xiNagios XI < 5.8.6 Core Config Manager (CCM) Reflected XSS via Test Command5.1 Medium
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Shell Command Injection8.7 High
- nagios xiNagios XI < 2012R1.6 Auto-Discovery Missing Authorization7.2 High
- nagios xiNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page8.6 High
- nagios xiNagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM8.7 High
- nagios xiNagios XI < 5.6.14 Authenticated RCE command_test.php via address9.4 Critical
- nagios xiNagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis7.1 High
- nagios xiNagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin9.4 Critical
- nagios xiNagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure7.1 High
- nagios xiNagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes7.1 High
- nagios xiNagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization8.7 High
- nagios xiNagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure7.3 High
- nagios network analyzerNagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu5.1 Medium
- nagios network analyzerNagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS5.1 Medium
- nagios network analyzerNagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function8.6 High
- nagios log serverNagios Log Server < 2.1.14 XSS via Snapshots Page5.1 Medium
- Show moreLoading…