What’s Vulnerable › Products

Nagios Log Server vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Check whether your Nagios Log Server version is affected

Latest Nagios Log Server vulnerabilities

• CVE-2025-34323 — Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules (CVSS 7.8)
• CVE-2025-34322 — Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries (CVSS 7.2)
• CVE-2025-34298 — Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation (CVSS 8.8)
• CVE-2025-34277 — Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID (CVSS 9.8)
• CVE-2025-34274 — Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges (CVSS 9.8)
• CVE-2025-34273 — Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion (CVSS 6.5)
• CVE-2025-34272 — Nagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback (CVSS 6.5)
• CVE-2025-34271 — Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext (CVSS 9.8)
• CVE-2025-34270 — Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated (CVSS 4.9)
• CVE-2024-58273 — Nagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root (CVSS 7.8)
• CVE-2023-7323 — Nagios Log Server < 2024R1 XSS via Create User Function (CVSS 5.4)
• CVE-2023-7322 — Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access (CVSS 8.1)
• CVE-2023-7321 — Nagios Log Server < 2.1.14 XSS via Snapshots Page (CVSS 5.4)
• CVE-2020-36858 — Nagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages (CVSS 5.4)
• CVE-2016-15049 — Nagios Log Server < 1.4.2 Dashboards Logs Table XSS (CVSS 5.4)
• CVE-2025-44824 — (CVSS 6.5)
• CVE-2025-44823 — (CVSS 8.8)
• CVE-2025-29471 — (CVSS 8.3)
• CVE-2021-35479 — (CVSS 5.4)
• CVE-2021-35478 — (CVSS 5.4)
• CVE-2020-25385 — (CVSS 6.1)
• CVE-2020-16157 — (CVSS 5.4)
• CVE-2019-15898 — (CVSS 6.1)