VendorsNagiosnagios_xi2026
Vulnerabilities

Nagios Nagios Xi 2026

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2026-2041
Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
Published 2026-02-20 · Analyzed
8.8EPSS 0.737
CVE-2026-2043
Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
Published 2026-02-20 · Analyzed
8.8EPSS 0.737
CVE-2026-2042
Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
Published 2026-02-20 · Analyzed
8.8EPSS 0.056
CVE-2025-67255
In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.
Published 2025-12-29 · Analyzed
8.8EPSS 0.011
CVE-2025-34288
Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo
Published 2025-12-16 · Analyzed
8.6EPSS 0.019
CVE-2025-67254
NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php.
Published 2025-12-29 · Analyzed
7.5EPSS 0.020