Advisories · Technology
Nagios Enterprises, LLC Nagios XI.
Every CVE that names Nagios Enterprises, LLC Nagios XI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Nagios XI < 2026R2 OS Command Injection via mibs.php
- Nagios Enterprises, LLC Nagios XI
- Command injection
- CVSS 6.9 Medium
Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Cross-site request forgery (CSRF)
- CVSS 7.7 High
Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Command injection
- CVSS 7.7 High
Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Command injection
- CVSS 5.1 Medium
Nagios Core / XI DOM-based XSS via jsonquery.js
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter
- Nagios Enterprises, LLC. Nagios Core
- Nagios Enterprises, LLC. Nagios XI
- Cross-site scripting (XSS)