# Nagios XI vulnerabilities

Source: https://junglewise.ai/threats/technologies/xi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/xi.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 50 vulnerabilities in Nagios XI: 0 in the last 7 days and 3 in the last 90 days, 5 of them critical and 4 exploited in the wild. The most recent, CVE-2026-119742, was published on 3 November 2026. 1 vulnerability in the last four weeks, down 50% on the four before (2).

## Counts

- Last 7 days: 0
- Last 30 days: 1
- Last 90 days: 3
- All time: 50 (5 critical, 4 exploited in the wild)

## About Nagios XI

An enterprise-level monitoring and alerting solution for IT infrastructure.

## Latest Nagios XI vulnerabilities

- [CVE-2026-119742: Nagios XI OS command injection in MIB upload](https://junglewise.ai/threats/cve-2026-119742-nagios-xi-before-2026r2-contains-an-os-command-injection) (high, CVSS 7.2, published 3 Nov 2026)
- [CVE-2023-24035: Nagios XI insecure timing comparison in authentication](https://junglewise.ai/threats/cve-2023-24035-nagios-xi-insecure-timing-comparison-in-authentication) (low, CVSS 3.5, published 14 Sep 2026)
- [CVE-2023-24034: Nagios XI open redirect in twilio_ajax_handler.php](https://junglewise.ai/threats/cve-2023-24034-nagios-xi-open-redirect-in-twilio-ajax-handler-php) (low, CVSS 3.1, published 14 Sep 2026)
- [CVE-2026-48550: Nagios Core reflected cross-site scripting in cmd.cgi](https://junglewise.ai/threats/cve-2026-48550-nagios-core-reflected-cross-site-scripting-in-cmd-cgi) (medium, CVSS 6.1, published 12 Aug 2026)
- [CVE-2025-67255: In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user…](https://junglewise.ai/threats/cve-2025-67255-in-nagiosxi-2026r1-0-1-build-1762361101-dashboard-parameters-lack) (high, CVSS 8.8, published 29 Dec 2025)
- [CVE-2025-67254: NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php.](https://junglewise.ai/threats/cve-2025-67254-nagiosxi-2026r1-0-1-build-1762361101-is-vulnerable-to-directory) (high, CVSS 7.5, published 29 Dec 2025)
- [CVE-2025-34286: Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run…](https://junglewise.ai/threats/cve-2025-34286-nagios-xi-versions-prior-to-2026r1-contain-a-remote-code) (high, CVSS 7.2, published 30 Oct 2025)
- [CVE-2023-7318: Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command…](https://junglewise.ai/threats/cve-2023-7318-nagios-xi-versions-prior-to-2024r1-0-2-are-vulnerable-to-cross) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2023-7317: Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote…](https://junglewise.ai/threats/cve-2023-7317-nagios-xi-versions-prior-to-2024r1-contain-a-missing-access) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2023-7316: Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component…](https://junglewise.ai/threats/cve-2023-7316-nagios-xi-versions-prior-to-2024r1-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2023-7315: Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component…](https://junglewise.ai/threats/cve-2023-7315-nagios-xi-versions-prior-to-5-11-3-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2023-7314: Nagios XI cross-site scripting in Bandwidth Report](https://junglewise.ai/threats/cve-2023-7314-nagios-xi-cross-site-scripting-in-bandwidth-report) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2023-7313: Nagios XI cross-site scripting in Bulk Modifications tool](https://junglewise.ai/threats/cve-2023-7313-nagios-xi-cross-site-scripting-in-bulk-modifications-tool) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2023-53688: Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF)…](https://junglewise.ai/threats/cve-2023-53688-nagios-xi-versions-prior-to-5-11-3-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2022-50588: Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the update checking feature…](https://junglewise.ai/threats/cve-2022-50588-nagios-xi-versions-prior-to-5-8-9-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2022-50587: Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) via the Apply Configuration error text…](https://junglewise.ai/threats/cve-2022-50587-nagios-xi-versions-prior-to-5-8-9-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2022-50586: Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the BPI component via the info URL…](https://junglewise.ai/threats/cve-2022-50586-nagios-xi-versions-prior-to-5-8-9-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2020-36869: Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page…](https://junglewise.ai/threats/cve-2020-36869-nagios-xi-versions-prior-to-5-7-5-contain-a-sql-injection) (high, CVSS 7.2, published 30 Oct 2025)
- [CVE-2020-36868: Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The…](https://junglewise.ai/threats/cve-2020-36868-nagios-xi-versions-prior-to-5-7-3-contain-a-privilege-escalation) (high, CVSS 7.8, published 30 Oct 2025)
- [CVE-2020-36867: Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export…](https://junglewise.ai/threats/cve-2020-36867-nagios-xi-versions-prior-to-5-7-3-contain-a-command-injection) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2020-36866: Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin…](https://junglewise.ai/threats/cve-2020-36866-nagios-xi-versions-prior-to-5-7-3-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2020-36865: Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process…](https://junglewise.ai/threats/cve-2020-36865-nagios-xi-versions-prior-to-5-7-2-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2020-36864: Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the background color settings in…](https://junglewise.ai/threats/cve-2020-36864-nagios-xi-versions-prior-to-5-7-2-are-vulnerable-to-cross-site) (medium, CVSS 5.4, published 30 Oct 2025)
- [CVE-2020-36863: Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that…](https://junglewise.ai/threats/cve-2020-36863-nagios-xi-versions-prior-to-5-7-2-allow-php-files-to-be-uploaded) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2020-36862: Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool…](https://junglewise.ai/threats/cve-2020-36862-nagios-xi-versions-prior-to-5-6-11-contain-unauthenticated) (medium, CVSS 6.1, published 30 Oct 2025)

## Most severe Nagios XI vulnerabilities

- [CVE-2021-25298: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25298-nagios-xi-os-command-injection) (critical, exploited in the wild, CVSS 8.8, published 18 Jan 2022)
- [CVE-2021-25296: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25296-nagios-xi-os-command-injection) (critical, exploited in the wild, CVSS 8.8, published 18 Jan 2022)
- [CVE-2021-25297: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25297-nagios-xi-os-command-injection) (critical, exploited in the wild, CVSS 8.8, published 18 Jan 2022)
- [CVE-2019-15949: Nagios XI Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-15949-nagios-xi-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 3 Nov 2021)
- [CVE-2012-10063: Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager…](https://junglewise.ai/threats/cve-2012-10063-nagios-xi-versions-prior-to-2012r1-3-contain-a-sql-injection) (critical, CVSS 9.8, published 30 Oct 2025)
- [CVE-2013-10073: Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool…](https://junglewise.ai/threats/cve-2013-10073-nagios-xi-versions-prior-to-2012r1-6-contain-a-shell-command) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2020-36867: Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export…](https://junglewise.ai/threats/cve-2020-36867-nagios-xi-versions-prior-to-5-7-3-contain-a-command-injection) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2020-36856: Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM…](https://junglewise.ai/threats/cve-2020-36856-nagios-xi-versions-prior-to-5-6-14-contain-an-authenticated) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2018-25122: Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The…](https://junglewise.ai/threats/cve-2018-25122-nagios-xi-versions-prior-to-5-4-13-contain-a-remote-code) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2023-7317: Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote…](https://junglewise.ai/threats/cve-2023-7317-nagios-xi-versions-prior-to-2024r1-contain-a-missing-access) (high, CVSS 8.8, published 30 Oct 2025)

## Vulnerabilities per week

1 vulnerability in the last four weeks, down 50% on the four before (2).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 2 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 1 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Nagios technologies

- [Nagios Fusion](https://junglewise.ai/threats/technologies/nagios-fusion): 6 vulnerabilities
- [Nagios Log Server](https://junglewise.ai/threats/technologies/nagios-log-server): 5 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Nagios XI vulnerabilities", https://junglewise.ai/threats/technologies/xi, 11 November 2026.