Nagios Enterprises vulnerabilities
3 vulnerabilities
Known vulnerabilities in Nagios Enterprises products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Nagios1 vulnerabilities
- Nagios XI1 vulnerabilities
- Nagios XI Graph Explorer1 vulnerabilities
CVE-2016-8641nagios enterprisesnagios+1
EPSS score1.14%
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.CVE-2025-34288nagios enterprisesnagios xi+1EPSS score1.85%
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.CVE-2012-10029nagios enterprisesnagios xi graph explorerEPSS score3.59%
Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in `visApi.php`. An authenticated user can inject system commands via unsanitized parameters such as `host`, resulting in remote code execution.