Product by Nagios Enterprises, Llc.
Nagios Xi
7 known vulnerabilities in Nagios Xi (Nagios Enterprises, Llc.), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-119742 | Nagios XI < 2026R2 OS Command Injection via mibs.php | 7.2 | |
| High | CVE-2026-48553 | Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection | 7.5 | |
| High | CVE-2026-48554 | Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution | 7.5 | |
| Medium | CVE-2026-48550 | Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter | 6.1 | |
| High | CVE-2026-48551 | Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie | 7.4 | |
| Medium | CVE-2026-48549 | Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie | 6.5 | |
| Medium | CVE-2026-48552 | Nagios Core / XI DOM-based XSS via jsonquery.js | 5.4 |