Vendor
high
advisory
Nagios XI: OS command injection in MIB upload feature (CVE-2026-119742)
1 rule 1 TTP 1 CVENagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature, allowing an authenticated administrator to execute arbitrary commands via crafted filenames containing shell metacharacters.
Nagios XI
webserver
command-injection
vulnerability
1r
1t
1c
high
advisory
Nagios Core and XI CSRF Protection Bypass
2 TTPs 2 CVEsNagios Core and XI contain a CSRF protection bypass vulnerability (CVE-2026-48551) that allows unauthenticated attackers to execute commands as an authorized user via manipulated double-submit cookies.
Nagios Core +1
vulnerability
rce
monitoring
2t
2c
updated