Nagios vulnerabilities

CVEs per yearBy the year they were published

1. 202519
2. 202516
3. 20255
4. 202514
5. 202514
6. 202511
7. 20251
8. 20255
9. 20254
10. 20251
11. 20256
12. 20263

Newest CVEs

• CVE-2023-24035

  An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker…

  Nagios · Nagios XI

  Low3.5
• CVE-2023-24034

  An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect…

  Nagios · Nagios XI

  Low3.1
• CVE-2026-2041

  Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2026-2043

  Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2026-2042

  Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2025-34323

  Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

  Nagios · Log Server

  High8.5
• CVE-2025-34322

  Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

  Nagios · Log Server

  High8.6
• CVE-2021-47698

  Nagios XI < 5.8.7 XSS in Core UI Views URL handling

  Nagios · XI

  Medium5.1
• CVE-2024-13997

  Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

  Nagios · XI

  Critical9.4
• CVE-2024-13998

  Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure

  Nagios · XI

  Medium6.0