Nagios

5 results · Clear filters · Feed

• High 8.6
  CVE-2025-34322 Public exploit

  Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

  Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and con…

  Nagios Log Server
  Nov 17, 2025
• Critical 9.9
  CVE-2025-44823 Public exploit EPSS 17%

  Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nag…

  Nagios Log Server
  Oct 7, 2025
• High 8.6
  CVE-2025-34227 Public exploit EPSS 26%

  Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

  Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the …

  Nagios Nagios XI
  Sep 25, 2025
• Unscored —
  CVE-2018-15710 Public exploit EPSS 38%

  Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

  Nagios Nagios XI
  Nov 14, 2018
• Unscored —
  CVE-2018-15708 Public exploit EPSS 89%

  Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP …

  Nagios Nagios XI
  Nov 14, 2018