{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Nagios vulnerabilities","home_page_url":"https://patchfirst.co/vendor/nagios/","feed_url":"https://patchfirst.co/feed/vendor/nagios.json","description":"New and newly exploited Nagios CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-2041","url":"https://patchfirst.co/cve/CVE-2026-2041/","title":"CVE-2026-2041: Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability","content_text":"Nagios · Host. Not in CISA KEV. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 7.2 HIGH. Priority 25.6 of 100.","summary":"Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability","date_published":"2026-02-20T00:00:00.000Z","date_modified":"2026-02-26T14:44:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.6,"kev":null,"epss":{"score":0.75586,"percentile":0.99518},"cvss":{"score":7.2,"severity":"HIGH","version":"3.0"},"vendor":"Nagios","product":"Host","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-2043","url":"https://patchfirst.co/cve/CVE-2026-2043/","title":"CVE-2026-2043: Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability","content_text":"Nagios · Host. Not in CISA KEV. EPSS 75.4% (higher than 99.52% of CVEs). CVSS 7.2 HIGH. Priority 25.6 of 100.","summary":"Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability","date_published":"2026-02-20T00:00:00.000Z","date_modified":"2026-02-26T14:44:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.6,"kev":null,"epss":{"score":0.75421,"percentile":0.99515},"cvss":{"score":7.2,"severity":"HIGH","version":"3.0"},"vendor":"Nagios","product":"Host","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-25298#kev","url":"https://patchfirst.co/cve/CVE-2021-25298/","title":"[KEV] CVE-2021-25298: Nagios XI OS Command Injection","content_text":"Nagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 73.6% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 69.1 of 100.","summary":"Nagios XI OS Command Injection","date_published":"2022-01-18T00:00:00.000Z","date_modified":"2026-07-09T13:39:54.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2022-01-18","ransomware":false},"epss":{"score":0.73641,"percentile":0.9947},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Nagios","product":"Nagios XI","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-25297#kev","url":"https://patchfirst.co/cve/CVE-2021-25297/","title":"[KEV] CVE-2021-25297: Nagios XI OS Command Injection","content_text":"Nagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 56.7% (higher than 99.06% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.","summary":"Nagios XI OS Command Injection","date_published":"2022-01-18T00:00:00.000Z","date_modified":"2026-07-09T13:39:51.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2022-01-18","ransomware":false},"epss":{"score":0.56659,"percentile":0.99061},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Nagios","product":"Nagios XI","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-25296#kev","url":"https://patchfirst.co/cve/CVE-2021-25296/","title":"[KEV] CVE-2021-25296: Nagios XI OS Command Injection","content_text":"Nagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 71.9% (higher than 99.43% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.","summary":"Nagios XI OS Command Injection","date_published":"2022-01-18T00:00:00.000Z","date_modified":"2026-07-09T13:39:49.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2022-01-18","ransomware":false},"epss":{"score":0.71935,"percentile":0.99427},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Nagios","product":"Nagios XI","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-15949#kev","url":"https://patchfirst.co/cve/CVE-2019-15949/","title":"[KEV] CVE-2019-15949: Nagios XI Remote Code Execution Vulnerability","content_text":"Nagios · Nagios XI. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 77.0% (higher than 99.55% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Nagios XI Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:21:24.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.77039,"percentile":0.9955},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Nagios","product":"Nagios XI","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-15708","url":"https://patchfirst.co/cve/CVE-2018-15708/","title":"CVE-2018-15708: Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP…","content_text":"Nagios · Nagios XI. Not in CISA KEV. EPSS 89.4% (higher than 99.78% of CVEs). Public exploit code exists. Priority 25.0 of 100.","summary":"Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP…","date_published":"2018-11-14T00:00:00.000Z","date_modified":"2024-09-17T01:55:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":25,"kev":null,"epss":{"score":0.89362,"percentile":0.99783},"cvss":null,"vendor":"Nagios","product":"Nagios XI","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}