Nagios Xi vulnerabilities

• nagios xi An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function... CVE-2023-24035 3.5 LowSeptember 14, 2026
• nagios xi An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can... CVE-2023-24034 3.1 LowSeptember 14, 2026
• nagios host, xi +1 more Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability CVE-2026-2041 EPSS 75.6% 7.2 HighFebruary 20, 2026
• nagios host, xi +1 more Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability CVE-2026-2043 EPSS 75.4% 7.2 HighFebruary 20, 2026
• nagios host, xi +1 more Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability CVE-2026-2042 7.2 HighFebruary 20, 2026
• nagios xi In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any... CVE-2025-67255 8.8 HighDecember 29, 2025
• nagios xi NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin... CVE-2025-67254 7.5 HighDecember 29, 2025
• nagios xi Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo CVE-2025-34288 8.6 HighDecember 16, 2025
• nagios xi Nagios XI < 5.8.7 XSS in Core UI Views URL handling CVE-2021-47698 5.1 MediumNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host CVE-2024-13997 9.4 CriticalNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure CVE-2024-13998 6.0 MediumNovember 3, 2025
• nagios xi Nagios XI < 2024R1.1 XSS via Missing Page / 404 CVE-2024-13992 5.1 MediumOctober 31, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks CVE-2011-10037 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via Views URL Handling CVE-2021-47697 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.4.13 XSS via Views Page CVE-2018-25121 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2012R2.6 XSS via Tools Menu CVE-2013-10074 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions CVE-2011-10040 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields CVE-2016-15051 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Recurring Downtime Script CVE-2011-10038 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via My Tools Page CVE-2021-47695 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via “My Reports” Listing CVE-2016-15053 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 XSS via Menu System CVE-2016-15052 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface CVE-2020-36866 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1 XSS via Graph Explorer CVE-2023-7316 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Graph Explorer CVE-2023-7315 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.3 XSS via Executive Summary Report CVE-2024-14001 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting CVE-2020-36864 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.0.2 XSS via Core Command Expansion CVE-2023-7318 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report CVE-2024-14000 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Bulk Modifications CVE-2023-7313 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.2 XSS via BPI Config Management CVE-2020-36865 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.0 XSS via BPI Config ID Handling CVE-2021-47696 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS via Bandwidth Report CVE-2023-7314 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler CVE-2011-10036 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing CVE-2011-10039 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form CVE-2021-47699 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay CVE-2023-53688 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1 Web SSH Terminal Missing Access Control CVE-2023-7317 9.4 CriticalOctober 30, 2025
• nagios xi Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory CVE-2020-36863 8.7 HighOctober 30, 2025
• nagios xi Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts CVE-2020-36862 6.9 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text CVE-2022-50587 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.9 Stored XSS via BPI Info URL CVE-2022-50586 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.8.9 Stored XSS in Update Checking CVE-2022-50588 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page CVE-2020-36869 8.7 HighOctober 30, 2025
• nagios xi Nagios XI < 5.2.4 SQL Injection in Notification Search CVE-2016-15050 8.7 HighOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change CVE-2024-13996 9.2 CriticalOctober 30, 2025
• nagios xi Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers CVE-2024-13993 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality CVE-2013-10071 5.1 MediumOctober 30, 2025
• nagios xi Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard CVE-2024-14008 9.4 CriticalOctober 30, 2025
• nagios xi Nagios XI < 2026R1 RCE via Run Check Command in CCM CVE-2025-34286 9.4 CriticalOctober 30, 2025
• Show olderLoading…