Known vulnerabilities in Nagios XI

Vendor: nagios.org
Software: Nagios XI
Software CPE: cpe:2.3:a:nagios_org:nagios_xi:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nagios XI Nagios XI is affected by 87 known vulnerabilities: 15 high, 29 medium, 43 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122831 - Command injection
CVE-2026-2041
CWE-77 Low
No
No
2026R1.0.1 13.02.2026 SB20260213139
#VU122830 - Command injection
CVE-2026-2043
CWE-77 Low
No
No
2026R1.0.1 13.02.2026 SB20260213139
#VU122829 - Command injection
CVE-2026-2042
CWE-77 Low
No
No
2026R1.0.1 13.02.2026 SB20260213139
#VU72063 - Improper Authentication
CVE-2023-24037
CWE-287 Medium
No
No
5.9.3 08.02.2023 SB2023020864
#VU72062 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-24036
CWE-601 Low
No
No
5.9.3 08.02.2023 SB2023020864
#VU72061 - Improper Authentication
CVE-2023-24035
CWE-287 Medium
No
No
5.9.3 08.02.2023 SB2023020864
#VU59527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-37352
CWE-601 Medium
No
No
5.8.5 12.01.2022 SB2021081318
#VU54068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
5.8.4 11.06.2021 SB2021061111
#VU54067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
5.8.4 11.06.2021 SB2021061111
#VU54066 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
5.8.4 11.06.2021 SB2021061111
#VU53527 - Creation of Temporary File With Insecure Permissions
CVE-2020-28910
CWE-378 Medium
No
No
5.8.0 25.05.2021 SB2021052531
#VU53521 - Permissions, Privileges, and Access Controls
CVE-2020-28906
CWE-264 Medium
No
No
5.8.0 25.05.2021 SB2021052531
#VU53515 - Insufficient Verification of Data Authenticity
CVE-2020-28900
CWE-345 Medium
No
No
5.8.0 25.05.2021 SB2021052531
#VU50726 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-25296
CWE-78 Medium
Available
Exploited
5.8.0 16.02.2021 SB2021021610
#VU50725 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-25299
CWE-79 Low
No
No
5.8.0 16.02.2021 SB2021021610
#VU50724 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-25297
CWE-78 Medium
Available
Exploited
5.8.0 16.02.2021 SB2021021610
#VU50723 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-25298
CWE-78 Medium
Available
Exploited
5.8.0 16.02.2021 SB2021021610
#VU49677 - Improper input validation
CWE-20 High
No
No
5.8.0 19.01.2021 SB2021011907
#VU49673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Available
No
5.8.0 19.01.2021 SB2021011907
#VU49672 - Improper Access Control
CWE-284 Medium
No
No
5.8.0 13.01.2021 SB2021011907


Showing elements 1 - 20 out of 87