Vendor

Nagios

4 of 7 Nagios CVEs in Patchfirst (57%) are in of vulnerabilities exploited in the wild.

CVEs: 7
In CISA KEV: 457%
Known ransomware use: 0
Median days to KEV: 337; from publication
Latest KEV listing: 18 Jan 2022

Watch Nagios Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Nagios XI In KEV: 4 CVEs: 5
Host In KEV: 0 CVEs: 2

Top ATT&CK techniques

What attackers do with Nagios CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 3
T1059Command and Scripting Interpreter CVEs: 3
T1078Valid Accounts CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/nagios.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Nagios CVEs linked to the technique. Each link’s provenance is on the CVE page.

Nagios CVEs

7 CVEs, by priority

CVE-2021-25298Nagios XI OS Command Injection
Nagios · Nagios XIKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing Application
73.6%Top 0.53%
69.1priority
CVE-2019-15949Nagios XI Remote Code Execution Vulnerability
Nagios · Nagios XIKEVPublic exploitHigh · 8.8T1078Valid Accounts T1059Command and Scripting Interpreter
77.0%Top 0.45%
69.1priority
CVE-2021-25297Nagios XI OS Command Injection
Nagios · Nagios XIKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
56.7%Top 0.94%
69.0priority
CVE-2021-25296Nagios XI OS Command Injection
Nagios · Nagios XIKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
71.9%Top 0.57%
69.0priority
CVE-2026-2041Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
Nagios · HostHigh · 7.2
75.6%Top 0.48%
25.6priority
CVE-2026-2043Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
Nagios · HostHigh · 7.2
75.4%Top 0.49%
25.6priority
CVE-2018-15708Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP…
Nagios · Nagios XIPublic exploit
89.4%Top 0.22%
25.0priority