What’s Vulnerable › Vulnerabilities

CVE-2025-34227: Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 25.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-25 · updated 2026-10-11
• Weakness: CWE-78

Description

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.

Affected products

• Nagios XI: through 2026

References

• https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/
• https://www.nagios.com/changelog/
• https://www.nagios.com/products/security/
• https://www.vulncheck.com/advisories/nagios-xi-config-wizard-auth-command-injection

Get alerted when CVE-2025-34227 or the next vulnerability affects your stack