Vulnerabilities

TI-2024-13006 CVE-2024-14003 · GHSA-r59m-f4mx-6pwc

Nagios XI < 2024R1.2 RCE via NRDP Server Plugins

MEDIUM 47

Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02297 Published 2025-10-30 Fixed in 2024R1.2 CWE-78

TI-2024-13007 CVE-2024-14004 · GHSA-gc26-2m4x-94qw

MEDIUM 42

Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01109 Published 2025-10-30 Fixed in 2024R1.2 CWE-269

TI-2024-13008 CVE-2024-14005 · GHSA-637x-97g8-9p5r

MEDIUM 49

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.04028 Published 2025-10-30 Fixed in 2024R1.2 CWE-78