Nagios vulnerabilities

CVEs per yearBy the year they were published

1. 20187
2. 20212
3. 20221
4. 2025104
5. 20265

Newest CVEs

• CVE-2023-24035

  An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker…

  Nagios · Nagios XI

  Low3.5
• CVE-2023-24034

  An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect…

  Nagios · Nagios XI

  Low3.1
• CVE-2026-2041

  Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2026-2043

  Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2026-2042

  Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

  Nagios · Host

  High7.2
• CVE-2025-34323

  Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

  Nagios · Log Server

  High8.5
• CVE-2025-34322

  Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

  Nagios · Log Server

  High8.6
• CVE-2021-47698

  Nagios XI < 5.8.7 XSS in Core UI Views URL handling

  Nagios · XI

  Medium5.1
• CVE-2024-13997

  Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

  Nagios · XI

  Critical9.4
• CVE-2024-13998

  Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure

  Nagios · XI

  Medium6.0