All packages
Nagios vulnerabilities
3 known CVE vulnerabilities in Nagios, translated and rated.
- CVE-2016-10089High
Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file.
- CVE-2026-48549Medium
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contain a CSRF vulnerability in cmd.cgi. The double-submit cookie protection can be bypassed when no Cookie header is present by supplying matching NagFormId and nagFormId values in the POST body.
- CVE-2026-48548Medium
Nagios Core before 4.5.12 contains a CSRF vulnerability in cmd.cgi where the CSRF protection passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as an authenticated user.