Known Vulnerabilities for Nagios Core by Nagios
Listed below are 5 of the newest known vulnerabilities associated with "Nagios Core" by "Nagios".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48554 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered ... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-48553 json | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-vari... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-48552 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Une... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-48551 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-sup... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-48550 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the N... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2023-40934 json | A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host esc... | Not Provided | 2023-09-19 | 2026-07-09 |
| CVE-2020-35269 json | Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like ad... | 8.8 - HIGH | 2020-12-23 | 2021-03-02 |
| CVE-2018-18245 json | Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a... | 5.4 - MEDIUM | 2018-12-17 | 2020-04-11 |
| CVE-2018-13458 json | qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to caus... | 5.5 - MEDIUM | 2018-07-12 | 2020-04-11 |
| CVE-2018-13457 json | qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to caus... | 5.5 - MEDIUM | 2018-07-12 | 2020-04-11 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Nagios | Nagios Core | 4.4.3 | |||
| Application | Nagios | Nagios Core | 4.4.3 | |||
| Application | Nagios | Nagios Core | 4.4.2 | |||
| Application | Nagios | Nagios Core | 4.4.1 | |||
| Application | Nagios | Nagios Core | 4.4.0 | |||
| Application | Nagios | Nagios Core | 4.3.4 | |||
| Application | Nagios | Nagios Core | 4.3.3 | |||
| Application | Nagios | Nagios Core | 4.3.2 | |||
| Application | Nagios | Nagios Core | 4.3.1 | |||
| Application | Nagios | Nagios Core | 4.3.0 | |||
| Application | Nagios | Nagios Core | 4.2.4 | |||
| Application | Nagios | Nagios Core | 4.2.3 | |||
| Application | Nagios | Nagios Core | 4.2.2 | |||
| Application | Nagios | Nagios Core | 4.2.1 | |||
| Application | Nagios | Nagios Core | 4.2.0 | |||
| Application | Nagios | Nagios Core | 4.1.1 | |||
| Application | Nagios | Nagios Core | 4.1.0 | |||
| Application | Nagios | Nagios Core | 4.1.0 | |||
| Application | Nagios | Nagios Core | 4.0.8 | |||
| Application | Nagios | Nagios Core | 4.0.8 |