Is CVE-2026-48551 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-48551 being exploited in the wild.

How severe is CVE-2026-48551?

High severity, with a CVSS score of 7.4, published 12 August 2026.

Which products and versions are affected?

Nagios Enterprises Nagios Core before 4.5.14.

Is there a fix for CVE-2026-48551?

A patch was published on 2026-08-12: Nagios Core 4.5.14 and Nagios XI 2026R1.7 contain fixes Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-48551 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-48551?

Check whether you run Nagios Enterprises Nagios Core at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-48551: Nagios Core and XI CSRF protection bypass via double-submit cookie

CVE-2026-48551 · Severity: high · CVSS 7.4 · Published 2026-08-12

Nagios Core and Nagios XI are monitoring and management systems used to track the health and performance of IT infrastructure. A weakness in their cross-site request forgery (CSRF) protection allows attackers to trick authorized users into performing unauthorized actions via specially crafted links. An unauthenticated attacker can exploit this to execute monitoring commands or administrative actions as the logged-in user without their knowledge.

Technologies: Nagios Enterprises Nagios Core. Vendors: Nagios Enterprises.

Quick answers

Is CVE-2026-48551 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-48551 being exploited in the wild.
How severe is CVE-2026-48551?: High severity, with a CVSS score of 7.4, published 12 August 2026.
Which products and versions are affected?: Nagios Enterprises Nagios Core before 4.5.14.
Is there a fix for CVE-2026-48551?: A patch was published on 2026-08-12: Nagios Core 4.5.14 and Nagios XI 2026R1.7 contain fixes Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-48551 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-48551?: Check whether you run Nagios Enterprises Nagios Core at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a CSRF protection bypass in the double-submit cookie mechanism used by Nagios Core and XI. The vulnerability allows an attacker to supply matching cookie and request parameter values to bypass CSRF validation, which is intended to prevent unauthorized state-changing requests from external sites. The attack requires no authentication and can be delivered via a malicious link that a logged-in Nagios user clicks, enabling command execution with the privileges of that user. Nagios Core 4.5.14 and Nagios XI 2026R1.7 or later contain fixes for this issue.

Affected products

Nagios Enterprises Nagios Core before 4.5.14
Nagios Enterprises Nagios XI before 2026R1.7

Timeline

2026-08-12: disclosed
2026-08-12: patched: Nagios Core 4.5.14 and Nagios XI 2026R1.7 contain fixes

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.