Nagios Enterprises Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

nagios1 vulnerability
Nagios XI1 vulnerability
Nagios XI Graph Explorer1 vulnerability

Nagios Enterprises vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2025-34288HIGH	Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Succ… CWE-732Dec 16, 2025	CVSS8.6v4.0	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2012-10029HIGH	Nagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command Injection Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in `visApi.php`. An authenticated user can inject system commands via unsanitized parameters such as `host`, resulting in remote code execution. CWE-78Aug 5, 2025	CVSS8.6v4.0	EPSS2.51%	PoCs2	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2016-8641MEDIUM	Nagios 4.2.2 - Local Privilege Escalation A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change. CWE-59Aug 1, 2018	CVSS6.7v3.0	EPSS1.14%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX