Nagios Enterprises, Llc.

7 CVEs across 2 Nagios Enterprises, Llc. products. Browse Nagios Enterprises, Llc. vulnerabilities, severities, and proof-of-concept exploits.

Nagios Enterprises, Llc. products with known CVEs

ProductCVEs
Nagios Core7
Nagios Xi6
Nagios Enterprises, Llc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-48549Medium6.52026-08-26Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie pr…
CVE-2026-48548Medium6.52026-08-26Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagForm…
CVE-2026-48554High7.52026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitu…
CVE-2026-48553High7.52026-08-12Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the N…
CVE-2026-48552Medium5.42026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflecte…
CVE-2026-48551High7.42026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An att…
CVE-2026-48550Medium6.12026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthentic…