CVE-2016-10089
HighSummary
Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file.
Risk Assessment
An attacker could gain full system privileges, posing a significant security risk to the organization.
Recommendation
It is recommended to update Nagios to the latest version to mitigate this vulnerability.
Other vulnerabilities in Nagios
See all- CVE-2026-48549Medium
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contain a CSRF vulnerability in cmd.cgi. The double-submit cookie protection can be bypassed when no Cookie header is present by supplying matching NagFormId and nagFormId values in the POST body.
- CVE-2026-48548Medium
Nagios Core before 4.5.12 contains a CSRF vulnerability in cmd.cgi where the CSRF protection passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as an authenticated user.
Original NVD description (English source)
Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641.