High · 8.8 CVE-2025-67255 EUVD-2025-205635GHSA-2wcx-prwg-mc24

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injec…

Published Dec 29, 2025 · Updated Dec 31, 2025 · Assigned by mitre

Description

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.

Advisories 1

WID-SEC-2025-2932 Nagios Enterprises Nagios XI: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 29, 2025

References

https://www.nagios.org/
https://github.com/YongYe-Security/NagiosXI/tree/main