Skip to contentNagios Xi vulnerabilities
- nagios host, xi +1 moreNagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution VulnerabilityCVE-2026-2041EPSS 75.6%7.2 High
- nagios host, xi +1 moreNagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution VulnerabilityCVE-2026-2043EPSS 75.4%7.2 High
- nagios host, xi +1 moreNagios Host monitoringwizard Command Injection Remote Code Execution VulnerabilityCVE-2026-20427.2 High
- nagios xiIn NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any...CVE-2025-672558.8 High
- nagios xiNagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin...CVE-2025-672547.5 High
- nagios xiNagios XI Privilege Escalation via Writable PHP Include Executed with SudoCVE-2025-342888.6 High
- nagios xiNagios XI < 5.8.7 XSS in Core UI Views URL handlingCVE-2021-476985.1 Medium
- nagios xiNagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on HostCVE-2024-139979.4 Critical
- nagios xiNagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information DisclosureCVE-2024-139986.0 Medium
- nagios xiNagios XI < 2024R1.1 XSS via Missing Page / 404CVE-2024-139925.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via xiwindow Variables Affecting PermalinksCVE-2011-100375.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via Views URL HandlingCVE-2021-476975.1 Medium
- nagios xiNagios XI < 5.4.13 XSS via Views PageCVE-2018-251215.1 Medium
- nagios xiNagios XI < 2012R2.6 XSS via Tools MenuCVE-2013-100745.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Status/Report Page Link FunctionsCVE-2011-100405.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via Report startdate/enddate FieldsCVE-2016-150515.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Recurring Downtime ScriptCVE-2011-100385.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via My Tools PageCVE-2021-476955.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via “My Reports” ListingCVE-2016-150535.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via Menu SystemCVE-2016-150525.1 Medium
- nagios xiNagios XI < 5.7.3 XSS via Manage Users in Admin InterfaceCVE-2020-368665.1 Medium
- nagios xiNagios XI < 2024R1 XSS via Graph ExplorerCVE-2023-73165.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Graph ExplorerCVE-2023-73155.1 Medium
- nagios xiNagios XI < 2024R1.1.3 XSS via Executive Summary ReportCVE-2024-140015.1 Medium
- nagios xiNagios XI < 5.7.2 XSS via Dashboard Background Color SettingCVE-2020-368645.1 Medium
- nagios xiNagios XI < 2024R1.0.2 XSS via Core Command ExpansionCVE-2023-73185.1 Medium
- nagios xiNagios XI < 2024R1.1.3 XSS via Capacity Planning ReportCVE-2024-140005.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Bulk ModificationsCVE-2023-73135.1 Medium
- nagios xiNagios XI < 5.7.2 XSS via BPI Config ManagementCVE-2020-368655.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via BPI Config ID HandlingCVE-2021-476965.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Bandwidth ReportCVE-2023-73145.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via backend_url JavaScript Link HandlerCVE-2011-100365.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” ListingCVE-2011-100395.1 Medium
- nagios xiNagios XI < 5.8.7 XSS in Audit Log via Send to NLS FormCVE-2021-476995.1 Medium
- nagios xiNagios XI < 5.11.3 XSS & CSRF via Hypermap ReplayCVE-2023-536885.1 Medium
- nagios xiNagios XI < 2024R1 Web SSH Terminal Missing Access ControlCVE-2023-73179.4 Critical
- nagios xiNagios XI < 5.7.2 Unrestricted File Upload via Audio Import DirectoryCVE-2020-368638.7 High
- nagios xiNagios XI < 5.6.11 Unauthenticated XSS and SSRF via HighchartsCVE-2020-368626.9 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error TextCVE-2022-505875.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS via BPI Info URLCVE-2022-505865.1 Medium
- nagios xiNagios XI < 5.8.9 Stored XSS in Update CheckingCVE-2022-505885.1 Medium
- nagios xiNagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit PageCVE-2020-368698.7 High
- nagios xiNagios XI < 5.2.4 SQL Injection in Notification SearchCVE-2016-150508.7 High
- nagios xiNagios XI < 2024R1.1.3 Session Not Invalidated After Password ChangeCVE-2024-139969.2 Critical
- nagios xiNagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older BrowsersCVE-2024-139935.1 Medium
- nagios xiNagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load FunctionalityCVE-2013-100715.1 Medium
- nagios xiNagios XI < 2024R1.3.2 RCE via WinRM Configuration WizardCVE-2024-140089.4 Critical
- nagios xiNagios XI < 2026R1 RCE via Run Check Command in CCMCVE-2025-342869.4 Critical
- nagios xiNagios XI < 2024R1.2 RCE via NRDP Server PluginsCVE-2024-140039.4 Critical
- nagios xiNagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)CVE-2025-341349.4 Critical
- Show olderLoading…