Nagios vulnerabilities
We track 44 vulnerabilities in Nagios products across 7 products. 44 are rated high or critical, and 4 have been exploited in real attacks. The most recent was published on February 20, 2026.
Latest Nagios vulnerabilities
- 8.8 High severity
Nagios XI OS Command Injection Exploited
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP
- 8.8 High severity
Nagios XI OS Command Injection Exploited
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP requ
- 8.8 High severity
Nagios XI OS Command Injection Exploited
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single H
- 8.8 High severity
Nagios XI Remote Code Execution Exploited
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=