Known exploited vulnerabilities
Nagios vulnerabilities attackers have used
Every Nagios vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 4 Nagios vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2021-25298, added Jan 18, 2022. Nagios XI has the most entries (4).
- In KEV, all time
- 4
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 0
Every Nagios entry in CISA KEV
CVE-2021-25298
Added · dueNagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
CVE-2021-25297
Added · dueNagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
CVE-2021-25296
Added · dueNagios XI OS Command Injection
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
CVE-2019-15949
Added · dueNagios XI Remote Code Execution Vulnerability
Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.