Login Request a demo
NA
Vendor
Nagios
20 products with CVEs on record
387
CVEs
4
On KEV
0
New 30D
Products
NX
Nagios XI
Nagios
9.8
194 CVEs4 on KEV0 new
XI
XI
Nagios
9.8
78 CVEs0 on KEV0 new
NA
Nagios
Nagios
9.8
37 CVEs0 on KEV0 new
LS
Log Server
Nagios
9.8
23 CVEs0 on KEV0 new
FU
Fusion
Nagios
9.8
19 CVEs0 on KEV0 new
NA
Network Analyzer
Nagios
9.8
7 CVEs0 on KEV0 new
NC
Nagios Core
Nagios
8.8
5 CVEs0 on KEV0 new
PL
Plugins
Nagios
8.4
4 CVEs0 on KEV0 new
HO
Host
Nagios
8.8
3 CVEs0 on KEV0 new
IM
Incident Manager
Nagios
9.8
3 CVEs0 on KEV0 new
RP
Remote Plug IN Executor
Nagios
7.5
3 CVEs0 on KEV0 new
FA
Favorites
Nagios
6.1
2 CVEs0 on KEV0 new
NC
Nagios Cross Platform Agent
Nagios
6.1
2 CVEs0 on KEV0 new
BP
Business Process Intelligence
Nagios
6.1
1 CVEs0 on KEV0 new
NN
Nagios Network Analyzer
Nagios
4.6
1 CVEs0 on KEV0 new
NX
Nagios XI Docker Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
NX
Nagios XI Switch Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
NX
Nagios XI Watchguard Wizard
Nagios
9.8
1 CVEs0 on KEV0 new
ND
Ndoutils
Nagios
7.8
1 CVEs0 on KEV0 new
RP
Remote Plugin Executor
Nagios
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-24035
NX
Nagios XI
Nagios
3.5
1%
Sep 14An issue was discovered in Nagios XI before 5.9.3
CVE-2023-24034
NX
Nagios XI
Nagios
3.1
1%
Sep 14An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3
CVE-2026-2041
HO
Host
Nagios
8.8
76%
Feb 20Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
CVE-2026-2043
HO
Host
Nagios
8.8
75%
Feb 20Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
CVE-2026-2042
HO
Host
Nagios
8.8
6%
Feb 20Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
CVE-2025-67254
NX
Nagios XI
Nagios
7.5
2%
Dec 29NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php
CVE-2025-67255
NX
Nagios XI
Nagios
8.8
1%
Dec 29In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability
CVE-2025-34288
NX
Nagios XI
Nagios
6.7
2%
Dec 16Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo
CVE-2025-34323
LS
Log Server
Nagios
7.8
0%
Nov 17Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules
CVE-2025-34322
LS
Log Server
Nagios
7.2
9%
Nov 17Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries
CVE-2021-47698
XI
XI
Nagios
5.4
0%
Nov 3Nagios XI < 5.8.7 XSS in Core UI Views URL handling
CVE-2024-13997
XI
XI
Nagios
7.2
1%
Nov 3Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host
CVE-2024-13998
XI
XI
Nagios
6.5
1%
Nov 3Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure
CVE-2024-13992
XI
XI
Nagios
5.4
1%
Oct 31Nagios XI < 2024R1.1 XSS via Missing Page / 404
CVE-2011-10037
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks
CVE-2021-47697
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.0 XSS via Views URL Handling
CVE-2018-25121
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.4.13 XSS via Views Page
CVE-2013-10074
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 2012R2.6 XSS via Tools Menu
CVE-2011-10040
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
CVE-2016-15051
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields
CVE-2011-10038
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 2011R1.9 XSS via Recurring Downtime Script
CVE-2021-47695
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.0 XSS via My Tools Page
CVE-2016-15053
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.2.4 XSS via “My Reports” Listing
CVE-2016-15052
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.2.4 XSS via Menu System
CVE-2020-36866
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.7.3 XSS via Manage Users in Admin Interface
CVE-2023-7316
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 2024R1 XSS via Graph Explorer
CVE-2023-7315
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 5.11.3 XSS via Graph Explorer
CVE-2024-14001
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 2024R1.1.3 XSS via Executive Summary Report
CVE-2020-36864
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.7.2 XSS via Dashboard Background Color Setting
CVE-2023-7318
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 2024R1.0.2 XSS via Core Command Expansion
CVE-2024-14000
XI
XI
Nagios
5.4
1%
Oct 30Nagios XI < 2024R1.1.3 XSS via Capacity Planning Report
CVE-2023-7313
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.11.3 XSS via Bulk Modifications
CVE-2020-36865
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.7.2 XSS via BPI Config Management
CVE-2021-47696
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.0 XSS via BPI Config ID Handling
CVE-2023-7314
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.11.3 XSS via Bandwidth Report
CVE-2011-10036
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler
CVE-2011-10039
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing
CVE-2021-47699
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form
CVE-2023-53688
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay
CVE-2023-7317
XI
XI
Nagios
8.8
2%
Oct 30Nagios XI < 2024R1 Web SSH Terminal Missing Access Control
CVE-2020-36863
XI
XI
Nagios
8.8
1%
Oct 30Nagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory
CVE-2020-36862
XI
XI
Nagios
6.1
1%
Oct 30Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts
CVE-2022-50587
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text
CVE-2022-50586
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.9 Stored XSS via BPI Info URL
CVE-2022-50588
XI
XI
Nagios
5.4
0%
Oct 30Nagios XI < 5.8.9 Stored XSS in Update Checking
CVE-2020-36869
XI
XI
Nagios
7.2
2%
Oct 30Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit Page
CVE-2016-15050
XI
XI
Nagios
8.8
1%
Oct 30Nagios XI < 5.2.4 SQL Injection in Notification Search
CVE-2024-13996
XI
XI
Nagios
9.8
1%
Oct 30Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change
CVE-2024-13993
XI
XI
Nagios
6.1
1%
Oct 30Nagios XI < 2024R1.1.2 Reflected XSS via Login Page on Older Browsers
CVE-2013-10071
XI
XI
Nagios
6.1
1%
Oct 30Nagios XI < 2012R1.6 Reflected XSS via Dashlet AJAX Load Functionality
CVE-2024-14008
XI
XI
Nagios
7.2
2%
Oct 30Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard
CVE-2025-34286
XI
XI
Nagios
7.2
2%
Oct 30Nagios XI < 2026R1 RCE via Run Check Command in CCM
CVE-2024-14003
XI
XI
Nagios
9.8
2%
Oct 30Nagios XI < 2024R1.2 RCE via NRDP Server Plugins
CVE-2025-34134
XI
XI
Nagios
7.2
2%
Oct 30Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)
CVE-2011-10035
XI
XI
Nagios
7.0
0%
Oct 30Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE
CVE-2024-14009
XI
XI
Nagios
7.2
1%
Oct 30Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile
CVE-2024-14004
XI
XI
Nagios
8.8
1%
Oct 30Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf)
CVE-2018-25123
XI
XI
Nagios
7.8
0%
Oct 30Nagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component
CVE-2020-36868
XI
XI
Nagios
7.8
0%
Oct 30Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script
CVE-2025-34287
XI
XI
Nagios
7.8
0%
Oct 30Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl