CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25298) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.
[Mitigation] Immediately upgrade Nagios XI to a patched version (5.8.0 or higher), or disable/restrict access to the vulnerable configuration wizard.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25297) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.
[Mitigation] Immediately upgrade to the latest patched version of Nagios XI, and restrict access to the vulnerable configuration wizard path.
Nagios XI 5.7.5 Remote OS Command Injection Vulnerability (CVE-2021-25296) Security Advisory
[Affected Scope] Nagios XI version 5.7.5
[Impact] Authenticated attackers can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, leading to complete system compromise.
[Mitigation] Immediately upgrade Nagios XI to the latest secure version (5.8.0 or higher) and restrict access to the web console.