CVE-2025-60424: High severity Nagios Fusion vulnerability
Published Oct 27, 2025
·Updated
A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.
Affected Software
3 affected components
Nagios Fusion
Nagios Fusion=2024-r1.2
Nagios Fusion=2024-r2.1
Event History
Oct 27, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60424?
CVE-2025-60424 is categorized as a high severity vulnerability due to its exploitability through brute force attacks.
2
How do I fix CVE-2025-60424?
To fix CVE-2025-60424, implement rate limiting for OTP verification in Nagios Fusion versions affected by this vulnerability.
3
Which versions of Nagios Fusion are affected by CVE-2025-60424?
CVE-2025-60424 affects Nagios Fusion versions v2024R1.2 and v2024R2.
4
What kind of attack does CVE-2025-60424 allow?
CVE-2025-60424 allows attackers to perform brute force attacks to bypass OTP authentication.
5
Is there a known exploit for CVE-2025-60424?
Yes, there is a known exploit for CVE-2025-60424 that demonstrates how to bypass OTP verification using brute force methods.