Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Nagios Log Server 2024R1.3.2 Clear all filters
TI-2025-28647 CVE-2025-44824 · GHSA-mh3w-pwxw-972f

Incorrect authorization in Nagios Log Server

Priority HIGH 70

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.02771 Published 2025-10-07 Fixed in 2024R1.3.2 CWE-863