CVE-2025-67254
HighCVSS 7.5Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php. The vulnerability allows access to files outside the intended directory.
Risk Assessment
An attacker can read sensitive files from the system, potentially leading to disclosure of confidential information such as configurations or credentials. The risk is high in production environments.
Recommendation
Update NagiosXI to the latest version containing the fix or apply mitigations such as restricting access to /admin/coreconfigsnapshots.php. Monitor logs for exploitation attempts.
Other vulnerabilities in NagiosXI
See all- CVE-2021-37223Medium
An SSRF vulnerability in NagiosXI up to version 5.8.4 allows authenticated users to create scheduled reports with PDF screenshots of any view. Lack of input sanitization enables replacing the target page with an SSRF payload.
- CVE-2025-67255High
In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability. This can lead to unauthorized database access.
Original NVD description (English source)
NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS