Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Nagios Core, Nagios XI 2026R1.7, 4.5.14 Clear all filters
TI-2026-35911 CVE-2026-48552 · GHSA-m927-w885-wph8

Nagios Core / XI DOM-based XSS via jsonquery.js

Priority LOW 23

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00289 Published 2026-08-12 Fixed in 4.5.14, 2026R1.7 CWE-79
TI-2026-35910 CVE-2026-48551 · GHSA-4f3c-j3m4-8h7h

Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie

Priority LOW 27

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie.

CVSS 4.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00264 Published 2026-08-12 Fixed in 4.5.14, 2026R1.7 CWE-352
TI-2026-35909 CVE-2026-48550 · GHSA-hc96-98mh-7j3h

Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter

Priority LOW 24

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00438 Published 2026-08-12 Fixed in 4.5.14, 2026R1.7 CWE-79