Skip to contentNagios vulnerabilities
Newest
- nagios log serverNagios Log Server < 2.1.14 XSS via Snapshots PageCVE-2023-73215.1 Medium
- nagios log serverNagios Log Server < 2024R1 XSS via Create User FunctionCVE-2023-73235.1 Medium
- nagios log serverNagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists PagesCVE-2020-368585.1 Medium
- nagios log serverNagios Log Server < 2024R1.3.2 Set Email Privilege EscalationCVE-2025-342988.7 High
- nagios log serverNagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard IDCVE-2025-342779.4 Critical
- nagios log serverNagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard FallbackCVE-2025-342725.3 Medium
- nagios log serverNagios Log Server < 2024R2.0.3 Non-Admin Dashboard DeletionCVE-2025-342737.1 High
- nagios log serverNagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to RootCVE-2024-582738.5 High
- nagios log serverNagios Log Server < 2024R2.0.3 Logstash Process Root PrivilegesCVE-2025-342749.3 Critical
- nagios log serverNagios Log Server < 2024R1 Incorrect Authorization Granting Full API AccessCVE-2023-73228.7 High
- nagios log serverNagios Log Server < 1.4.2 Dashboards Logs Table XSSCVE-2016-150495.1 Medium
- nagios log serverNagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over PlaintextCVE-2025-342718.7 High
- nagios log serverNagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not ObfuscatedCVE-2025-342706.9 Medium
- nagios fusionNagios Fusion < 4.0.1 XSS via Users/Servers PageCVE-2017-202095.1 Medium
- nagios fusionNagios Fusion < 4.1.5 XSS via fusionwindow ParameterCVE-2018-251195.1 Medium
- nagios fusionNagios Fusion < 4.2.0 License Information Reflected XSSCVE-2023-536896.0 Medium
- nagios fusionNagios Fusion < 4.2.0 LDAP/AD Integration Stored XSSCVE-2023-536906.2 Medium
- nagios fusionNagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmailCVE-2023-73126.2 Medium
- nagios fusionNagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the...CVE-2025-60425Public exploit8.6 High
- nagios fusionA lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2...CVE-2025-60424Public exploit7.6 High
- nagios log serverNagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to...CVE-2025-448248.5 High
- nagios log serverNagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext...CVE-2025-44823Public exploitEPSS 16.9%9.9 Critical
- nagios host, teamviewer full client +1 morePrivilege Escalation via Symbolic Link Spoofing in TeamViewer ClientCVE-2025-414214.7 Medium
- nagios xiNagios XI < 2026R1 Configuration Wizard Authenticated Command InjectionCVE-2025-34227Public exploitEPSS 26.5%8.6 High
- nagios xiNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCECVE-2024-139868.7 High
- nagios host, teamviewer full client +1 moreArbitrary File Creation via Symbolic Link leading to Denial-of-ServiceCVE-2025-440026.1 Medium
- nagios xiA cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows...CVE-2025-564326.1 Medium
- nagios host, teamviewer full client, full client (win7/8) +1 more +3 moreIncorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementCVE-2025-365377.0 High
- nagios network analyzerAn access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to...CVE-2025-280597.5 High
- nagios log serverCross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to...CVE-2025-29471Public exploit8.3 High
- nagios network analyzerA session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse...CVE-2025-281324.6 Medium
- nagios network analyzerA Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege...CVE-2025-281314.6 Medium
- nagios xiNagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by...CVE-2024-549576.1 Medium
- nagios xiNagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated...CVE-2024-549616.5 Medium
- nagios xiA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL...CVE-2024-549606.5 Medium
- nagios xiNagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the...CVE-2024-549596.1 Medium
- nagios xiNagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the...CVE-2024-549586.1 Medium
- nagios xiA cross-site scripting (XSS) vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute...CVE-2024-428985.4 Medium
- nagios xiNagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly...CVE-2023-480829.1 Critical
- nagios pluginscheck_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS}. This has been categorized both as fixed in e8810de, a…CVE-2023-371548.4 High
- nagios ndoutilsNagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain...CVE-2024-431997.8 High
- nagios xiAn issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to...CVE-2024-33775Public exploit8.8 High
- nagios xiAn issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted...CVE-2024-24402Public exploit9.8 Critical
- nagios xiSQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary...CVE-2024-24401Public exploitEPSS 45.9%9.8 Critical
- nagios xiA stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to...CVE-2023-510725.4 Medium
- nagios cross platform agentDOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios...CVE-2021-435844.8 Medium
- nagios xiNagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE)...CVE-2023-48085EPSS 75.8%9.8 Critical
- nagios xiNagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the...CVE-2023-48084Public exploitEPSS 34.0%9.8 Critical
- nagios xiA SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with...CVE-2023-409347.2 High
- nagios xiA SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with...CVE-2023-40933Public exploit8.8 High
- Show moreLoading…