Skip to content
OpenAdvisories

Vendor

Nagios

119 known vulnerabilities.

Products

XI 77 Log Server 17 Nagios XI 13 Fusion 5 Host 3 Network Analyzer 3 NCPA 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-34322 Public exploit

    Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

    Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and con…

    Nagios Log Server
  • High 8.6
    CVE-2025-34227 Public exploit EPSS 26%

    Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

    Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the …

    Nagios Nagios XI