Fusion vulnerabilities

2 known vulnerabilities in Fusion from Nagios. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Fusion: Public cloneable() Method Without Final

  CVE-2025-60425Oct 27, 2025Nagios

  Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.

• 7.6 High severity

  Fusion: Improper Authentication

  CVE-2025-60424Oct 27, 2025Nagios

  A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.