Nagios Enterprises, LLC. vulnerabilities
We track 4 vulnerabilities in Nagios Enterprises, LLC. products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest Nagios Enterprises, LLC. vulnerabilities
- 7.2 High severity
Nagios XI: Improper Neutralization of Special Elements used in an OS Command
Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the install_mib() function in mibs.php sanitizes uploaded filenames with an incomplete character-substitution filter that omits semicolons, pipes, and non-sp
- 7.5 High severity
Nagios Core: Improper Neutralization of Special Elements used in an OS Command
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_data parameter. When a notification command references $NOTIFICATIONCOMMENT$ or
- 7.5 High severity
Nagios Core: Improper Neutralization of Special Elements used in an OS Command
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP). When a custom variable defined on a host, service, or contact is
- 7.4 High severity
Nagios Core: Cross-Site Request Forgery
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling una