Nagios vendor intelligence
Nagios Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Nagios products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 7
- Known exploited vulnerabilities affecting Nagios products
- In CISA KEV
- 4
- Records also listed in the official catalog
- Beyond CISA KEV
- 3
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 0
- Nagios KEVs with sensor-observed exploitation activity
The catalog gap matters for Nagios exposure
Three of the seven exploited Nagios vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 43% of this vendor portfolio.
- 57%
- Covered by CISA
- 43%
- Beyond CISA
- 2
- Product families
Attested Nagios vulnerabilities
7 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2018-10736
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter. |
Nagios XI | High | Beyond CISA | 14 Sep 2026 |
|
CVE-2018-10735
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter. |
Nagios XI | High | Beyond CISA | 14 Sep 2026 |
|
CVE-2018-10737
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter. |
XI | High | Beyond CISA | 25 Apr 2025 |
|
CVE-2019-15949
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the... |
XI | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-25298
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file... |
Nagios XI | Confirmed | In CISA | 18 Jan 2022 |
|
CVE-2021-25297
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file... |
Nagios XI | Confirmed | In CISA | 18 Jan 2022 |
|
CVE-2021-25296
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file... |
Nagios XI | Confirmed | In CISA | 18 Jan 2022 |
No Nagios vulnerabilities match this search or filter.
Showing 7 of 7 on this page (7 Nagios known exploited vulnerabilities).
Recurring weakness patterns
Neutralization and neutralization account for six mapped occurrences across this Nagios KEV portfolio.