Vendor

    Nagios Enterprises, Llc.

    8 known vulnerabilities in products by Nagios Enterprises, Llc., 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Nagios Enterprises, Llc.
    HighCVE-2026-119742

    Nagios XI < 2026R2 OS Command Injection via mibs.php

    		7.2
    HighCVE-2026-48554

    Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution

    also in 1 other product

    		7.5
    HighCVE-2026-48553

    Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection

    also in 1 other product

    		7.5
    MediumCVE-2026-48550

    Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter

    also in 1 other product

    		6.1
    HighCVE-2026-48551

    Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie

    also in 1 other product

    		7.4
    MediumCVE-2026-48549

    Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

    also in 1 other product

    		6.5
    MediumCVE-2026-48548

    Nagios Core CSRF via cmd.cgi

    also in 1 other product

    		6.5
    MediumCVE-2026-48552

    Nagios Core / XI DOM-based XSS via jsonquery.js

    also in 1 other product

    		5.4

    Products

    Products by Nagios Enterprises, Llc.
    Nagios Core70
    Nagios Xi70