PNP4Nagios vulnerabilities

3 known CVE vulnerabilities in PNP4Nagios, translated and rated.

CVE-2017-16834High
PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account. Exploiting these files can lead to root code execution by local users.
CVE-2023-38350Medium
PNP4Nagios version 0.6.26 has a stored XSS vulnerability in the AJAX controller via the basket API and filters.
CVE-2023-38349High
PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects version 0.6.26.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS