Skip to contentNagios Enterprises Xi vulnerabilities
- nagios enterprises xiNagios XI < 2026R2 OS Command Injection via mibs.phpCVE-2026-1197428.6 High
- nagios xiAn issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function...CVE-2023-240353.5 Low
- nagios xiAn issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can...CVE-2023-240343.1 Low
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI CSRF via cmd.cgi Double-Submit CookieCVE-2026-48549Fix available6.9 Medium
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro SubstitutionCVE-2026-48554Fix available7.7 High
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI Authenticated RCE via Custom-Variable Macro InjectionCVE-2026-48553Fix available7.7 High
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI DOM-based XSS via jsonquery.jsCVE-2026-48552Fix available5.1 Medium
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI CSRF Protection Bypass via Double-Submit CookieCVE-2026-48551Fix available6.1 Medium
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI cmd.cgi Reflected XSS via NagFormId ParameterCVE-2026-48550Fix available5.1 Medium
- nagios xiNagios XI Privilege Escalation via Writable PHP Include Executed with SudoCVE-2025-342888.6 High
- nagios xiNagios XI < 2026R1 Configuration Wizard Authenticated Command InjectionCVE-2025-34227Public exploitEPSS 26.5%8.6 High
- nagios xiNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCECVE-2024-139868.7 High
- nagios enterprises xi graph explorerNagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command InjectionCVE-2012-10029Public exploit8.6 High
- nagios xiThe general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated...CVE-2021-33179EPSS 11.7%6.1 Medium
- nagios xiThe Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL...CVE-2021-33177EPSS 10.1%8.8 High
- nagios xiImproper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...CVE-2020-57967.8 High
- nagios xiImproper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a...CVE-2020-5791Public exploitEPSS 78.6%7.2 High
- nagios xiCross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive...CVE-2020-57906.5 Medium
- nagios xiImproper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote,...CVE-2020-5792Public exploitEPSS 63.5%7.2 High
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-157146.1 Medium
- nagios xiNagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via...CVE-2018-157135.4 Medium
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-15712EPSS 48.6%6.1 Medium
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more...CVE-2018-15711EPSS 36.0%8.8 High
- nagios xiNagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via...CVE-2018-15710Public exploitEPSS 38.2%7.8 High
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted...CVE-2018-15709EPSS 21.0%8.8 High
- nagios xiSnoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary...CVE-2018-15708Public exploitEPSS 89.5%9.8 Critical