What’s Vulnerable › Products
Nagios XI vulnerabilities
194 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 94 published in the last 12 months.
Check whether your Nagios XI version is affected
Exploited Nagios XI vulnerabilities
- CVE-2021-25298 — Nagios XI OS Command Injection
- CVE-2021-25297 — Nagios XI OS Command Injection
- CVE-2021-25296 — Nagios XI OS Command Injection
- CVE-2019-15949 — Nagios XI Remote Code Execution Vulnerability
Latest Nagios XI vulnerabilities
- CVE-2023-24035 — (CVSS 3.5)
- CVE-2023-24034 — (CVSS 3.1)
- CVE-2026-2043 — Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-2042 — Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-2041 — Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-67255 — (CVSS 8.8)
- CVE-2025-67254 — (CVSS 7.5)
- CVE-2025-34288 — Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo (CVSS 6.7)
- CVE-2024-13998 — Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure (CVSS 6.5)
- CVE-2024-13997 — Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host (CVSS 7.2)
- CVE-2021-47698 — Nagios XI < 5.8.7 XSS in Core UI Views URL handling (CVSS 5.4)
- CVE-2024-13992 — Nagios XI < 2024R1.1 XSS via Missing Page / 404 (CVSS 5.4)
- CVE-2025-34287 — Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl (CVSS 7.8)
- CVE-2025-34286 — Nagios XI < 2026R1 RCE via Run Check Command in CCM (CVSS 7.2)
- CVE-2025-34284 — Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin (CVSS 8.8)
- CVE-2025-34283 — Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes (CVSS 6.5)
- CVE-2025-34135 — Nagios XI < 2024R1.4.2 Overly Permissive Permissions on Systemd Unit Files (CVSS 4.4)
- CVE-2025-34134 — Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI) (CVSS 7.2)
- CVE-2024-14009 — Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile (CVSS 7.2)
- CVE-2024-14008 — Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard (CVSS 7.2)
- CVE-2024-14006 — Nagios XI < 2024R1.2.2 Host Header Injection (CVSS 6.1)
- CVE-2024-14005 — Nagios XI < 2024R1.2 Command Injection via Docker Wizard (CVSS 8.8)
- CVE-2024-14004 — Nagios XI < 2024R1.2 Privilege Escalation via NagVis Configuration (nagvis.conf) (CVSS 8.8)
- CVE-2024-14003 — Nagios XI < 2024R1.2 RCE via NRDP Server Plugins (CVSS 9.8)
- CVE-2024-14002 — Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis (CVSS 5.5)