Nagios vulnerabilities

Products

• Xi 192
• Xi 78
• Nagios 37
• Log Server 23
• Fusion 19
• Log Server 17
• Xi 17
• Host 16
• Network Analyzer 7
• Core 5
• Plugins 4
• Incident Manager 3
• Network Analyzer 3
• Remote Plug In Executor 3
• Favorites 2
• Cross Platform Agent 2

Newest

• nagios host, teamviewer full client +1 more Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows CVE-2026-111583 7.3 HighOctober 27, 2026
• nagios host, teamviewer full client +1 more Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows CVE-2026-92377 7.8 HighOctober 27, 2026
• nagios host, teamviewer full client, remote management - monitoring +2 more Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring CVE-2026-92375 7.8 HighOctober 27, 2026
• nagios host, teamviewer full client +1 more Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS CVE-2026-92374 7.8 HighOctober 27, 2026
• nagios host, teamviewer full client +1 more Remote Session Access Control Bypass Leading to Remote Code Execution CVE-2026-92370 8.8 HighSeptember 29, 2026
• nagios host, teamviewer full client +1 more Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording CVE-2026-92371 7.0 HighSeptember 29, 2026
• nagios host, teamviewer full client +1 more Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution CVE-2026-92368 7.8 HighSeptember 29, 2026
• nagios host, teamviewer full client +1 more Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation CVE-2026-92369 7.3 HighSeptember 29, 2026
• nagios host, teamviewer full client +1 more Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients CVE-2026-19743 7.8 HighSeptember 29, 2026
• nagios xi An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function... CVE-2023-24035 3.5 LowSeptember 14, 2026
• nagios xi An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can... CVE-2023-24034 3.1 LowSeptember 14, 2026
• nagios host, teamviewer full client +1 more Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling CVE-2026-19042 8.8 HighAugust 26, 2026
• nagios host, xi +1 more Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability CVE-2026-2041 EPSS 75.6% 7.2 HighFebruary 20, 2026
• nagios host, xi +1 more Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability CVE-2026-2043 EPSS 75.4% 7.2 HighFebruary 20, 2026
• nagios host, xi +1 more Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability CVE-2026-2042 7.2 HighFebruary 20, 2026
• nagios xi In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any... CVE-2025-67255 8.8 HighDecember 29, 2025
• nagios xi NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin... CVE-2025-67254 7.5 HighDecember 29, 2025
• nagios xi Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo CVE-2025-34288 8.6 HighDecember 16, 2025
• nagios log server Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules CVE-2025-34323 8.5 HighNovember 17, 2025
• nagios log server Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries CVE-2025-34322 Public exploit 8.6 HighNovember 17, 2025
• nagios xi Nagios XI < 5.8.7 XSS in Core UI Views URL handling CVE-2021-47698 5.1 MediumNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host CVE-2024-13997 9.4 CriticalNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure CVE-2024-13998 6.0 MediumNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1 XSS via Missing Page / 404 CVE-2024-13992 5.1 MediumOctober 31, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks CVE-2011-10037 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via Views URL Handling CVE-2021-47697 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.4.13 XSS via Views Page CVE-2018-25121 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2012R2.6 XSS via Tools Menu CVE-2013-10074 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions CVE-2011-10040 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields CVE-2016-15051 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Recurring Downtime Script CVE-2011-10038 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via My Tools Page CVE-2021-47695 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via “My Reports” Listing CVE-2016-15053 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via Menu System CVE-2016-15052 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface CVE-2020-36866 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1 XSS via Graph Explorer CVE-2023-7316 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Graph Explorer CVE-2023-7315 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.3 XSS via Executive Summary Report CVE-2024-14001 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting CVE-2020-36864 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.0.2 XSS via Core Command Expansion CVE-2023-7318 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report CVE-2024-14000 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Bulk Modifications CVE-2023-7313 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.2 XSS via BPI Config Management CVE-2020-36865 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via BPI Config ID Handling CVE-2021-47696 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Bandwidth Report CVE-2023-7314 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler CVE-2011-10036 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing CVE-2011-10039 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form CVE-2021-47699 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay CVE-2023-53688 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1 Web SSH Terminal Missing Access Control CVE-2023-7317 9.4 CriticalOctober 30, 2025
• Show olderLoading…