Skip to content
OpenAdvisories

Product · Nagios

Log Server

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34277

    Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID

    Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause th…

    Nagios Log Server
  • Critical 9.3
    CVE-2025-34274

    Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges

    Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an i…

    Nagios Log Server
  • Critical 9.9
    CVE-2025-44823 Public exploit EPSS 17%

    Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nag…

    Nagios Log Server