Known Vulnerabilities for Nagios Core by Nagios
Listed below are 5 of the newest known vulnerabilities associated with "Nagios Core" by "Nagios".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48554 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered ... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-48553 json | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-vari... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-48552 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Une... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-48551 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-sup... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-48550 json | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the N... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-48549 json | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is pr... | Not Provided | 2026-08-26 | 2026-08-28 |
| CVE-2026-48548 json | Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism ... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2020-35269 json | Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like ad... | 8.8 - HIGH | 2020-12-23 | 2021-03-02 |
| CVE-2018-18245 json | Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a... | 5.4 - MEDIUM | 2018-12-17 | 2020-04-11 |
| CVE-2018-13458 json | qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to caus... | 5.5 - MEDIUM | 2018-07-12 | 2020-04-11 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Nagios | Nagios Core | 4.4.3 | |||
| Application | Nagios | Nagios Core | 4.4.3 | |||
| Application | Nagios | Nagios Core | 4.4.2 | |||
| Application | Nagios | Nagios Core | 4.4.1 | |||
| Application | Nagios | Nagios Core | 4.4.0 | |||
| Application | Nagios | Nagios Core | 4.3.4 | |||
| Application | Nagios | Nagios Core | 4.3.3 | |||
| Application | Nagios | Nagios Core | 4.3.2 | |||
| Application | Nagios | Nagios Core | 4.3.1 | |||
| Application | Nagios | Nagios Core | 4.3.0 | |||
| Application | Nagios | Nagios Core | 4.2.4 | |||
| Application | Nagios | Nagios Core | 4.2.3 | |||
| Application | Nagios | Nagios Core | 4.2.2 | |||
| Application | Nagios | Nagios Core | 4.2.1 | |||
| Application | Nagios | Nagios Core | 4.2.0 | |||
| Application | Nagios | Nagios Core | 4.1.1 | |||
| Application | Nagios | Nagios Core | 4.1.0 | |||
| Application | Nagios | Nagios Core | 4.1.0 | |||
| Application | Nagios | Nagios Core | 4.0.8 | |||
| Application | Nagios | Nagios Core | 4.0.8 |