Known Vulnerabilities for products from Nagios
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nagios".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73974 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-73973 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-67436 json | Not Provided | 2026-07-29 | 2026-07-30 | |
| CVE-2026-67433 json | Not Provided | 2026-07-29 | 2026-07-30 | |
| CVE-2026-55426 json | Not Provided | 2026-08-18 | 2026-08-20 | |
| CVE-2026-52817 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-48554 json | Not Provided | 2026-08-12 | 2026-08-14 | |
| CVE-2026-48553 json | Not Provided | 2026-08-12 | 2026-08-14 | |
| CVE-2026-48552 json | Not Provided | 2026-08-12 | 2026-08-14 | |
| CVE-2026-48551 json | Not Provided | 2026-08-12 | 2026-08-14 | |
| CVE-2025-67255 json | In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to explo... | Not Provided | 2025-12-29 | 2026-10-13 |
| CVE-2025-67254 json | NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php. | Not Provided | 2025-12-29 | 2026-10-13 |
| CVE-2025-56432 json | A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute a... | Not Provided | 2025-08-26 | 2026-07-05 |
| CVE-2025-44824 json | Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service ... | Not Provided | 2025-10-07 | 2026-10-08 |
| CVE-2025-44823 json | Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslog... | Not Provided | 2025-10-07 | 2026-10-08 |
| CVE-2025-34323 json | Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo mis... | Not Provided | 2025-11-17 | 2026-10-07 |
| CVE-2025-34322 json | Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental '... | Not Provided | 2025-11-17 | 2026-10-07 |
| CVE-2025-34298 json | Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workf... | Not Provided | 2025-10-30 | 2026-10-07 |
| CVE-2025-34287 json | Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodically as... | Not Provided | 2025-10-30 | 2026-10-07 |
| CVE-2025-34286 json | Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run Check ... | Not Provided | 2025-10-30 | 2026-10-07 |
Known software with vulnerabilities from Nagios
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nagios | Business Process Intelligence | 2.3.4 |
| Application | Nagios | Favorites | - |
| Application | Nagios | Fusion | 4.0.0 |
| Application | Nagios | Incident Manager | 2.0.0 |
| Application | Nagios | Log Server | - |
| Application | Nagios | Nagios | 2.0.1 |
| Application | Nagios | Nagios Core | 1.0.0 |
| Application | Nagios | Nagios Xi | 2009 |
| Application | Nagios | Plugins | 1.3.0 |
| Application | Nagios | Remote Plugin Executor | 2.15 |
| Application | Nagios | Remote Plug In Executor | 1.3 |