Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how nagios compares to other vendors in security performance

View Risk Score →

Nagios Nagios CoreNagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution

Risk 70
Severity
7.5
First published (updated )
CVE-2026-48554

Nagios Nagios CoreNagios Core / XI Authenticated RCE via Custom-Variable Macro Injection

Risk 70
Severity
7.5
First published (updated )
CVE-2026-48553

Nagios Nagios CoreNagios Core / XI DOM-based XSS via jsonquery.js

Risk 34
Severity
5.4
First published (updated )
CVE-2026-48552

Nagios Nagios CoreNagios Core / XI CSRF Protection Bypass via Double-Submit Cookie

Risk 42
Severity
7.4
First published (updated )
CVE-2026-48551

Nagios Nagios CoreNagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter

Risk 38
Severity
6.1
First published (updated )
CVE-2026-48550
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nagios Nagios XINagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2026-2041

Nagios Nagios XINagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2026-2043

Nagios Nagios HostNagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2026-2042

Nagios Nagios HostZDI-26-073: Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
ZDI-CAN-28250

Nagios Nagios HostZDI-26-072: Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
ZDI-CAN-28249
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nagios Nagios HostNagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
Advisory
ZDI-26-073

Nagios Nagios HostNagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
Advisory
ZDI-26-072

Nagios Nagios HostNagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
Advisory
ZDI-26-071

Nagios Nagios HostZDI-26-071: Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

Risk 34
Severity
7.2
First published (updated )
ZDI-CAN-28245

Nagios Nagios XIPath Traversal

Risk 43
Severity
7.5
First published (updated )
CVE-2025-67254
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nagios Nagios XISQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-67255

Nagios Nagios XINagios XI Privilege Escalation via Writable PHP Include Executed with Sudo

Risk 72
Severity
8.6
First published (updated )
CVE-2025-34288

Nagios Log ServerNagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

Risk 73
Severity
8.5
First published (updated )
CVE-2025-34323

Nagios Log ServerNagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

Risk 72
Severity
8.6
First published (updated )
CVE-2025-34322

Nagios XINagios XI < 5.4.0 XSS via jQuery Migrate Library

Risk 29
Severity
6.1
First published (updated )
CVE-2016-15054
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nagios XINagios XI < 5.8.7 XSS in Core UI Views URL handling

Risk 34
Severity
5.4
First published (updated )
CVE-2021-47698

Nagios Nagios XINagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Risk 75
Severity
9.4
First published (updated )
CVE-2024-13997

Nagios Nagios XINagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure

Risk 38
Severity
6.5
First published (updated )
CVE-2024-13998

Nagios Nagios XINagios XI < 2024R1.1 XSS via Missing Page / 404

Risk 34
Severity
5.4
First published (updated )
CVE-2024-13992

Nagios Nagios XINagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks

Risk 34
Severity
5.4
First published (updated )
CVE-2011-10037
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nagios XINagios XI < 5.8.0 XSS via Views URL Handling

Risk 34
Severity
5.4
First published (updated )
CVE-2021-47697

Nagios Nagios XINagios XI < 5.4.13 XSS via Views Page

Risk 34
Severity
5.4
First published (updated )
CVE-2018-25121

Nagios Nagios XINagios XI < 2012R2.6 XSS via Tools Menu

Risk 34
Severity
5.4
First published (updated )
CVE-2013-10074

Nagios Nagios XINagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Risk 34
Severity
5.4
First published (updated )
CVE-2011-10040

Nagios XINagios XI < 5.2.4 XSS via Report startdate/enddate Fields

Risk 34
Severity
5.4
First published (updated )
CVE-2016-15051
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203