CVE-2018-8736: nagios nagios_xi
Vulnerability summary
CVE-2018-8736 is a high (CVSS 9.0) vulnerability in nagios nagios_xi. EPSS estimates a 45.63% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 18-04-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
45.63%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+1.15 pp
From 44.48% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (blog.redactedsec.net)
Maturity: unknown
Nagios XI Chained Remote Code Execution
exploit/linux/http/nagios_xi_chained_rce
Maturity: weaponized
Nagios XI Chained Remote Code Execution
exploit/linux/http/nagios_xi_chained_rce_2_electric_boogaloo
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Nagios1 product
- nagios_xi≥ 5.2.0, < 5.4.13
1 vendor · 1 product
References
6 links- blog.redactedsec.net/exploits/2018/04/26/nagios.htmlX Refsource MISCExploitRelease NotesTechnical DescriptionThird Party Advisory