Brand
Nagios: actively exploited vulnerabilities
4 vulnerabilities in Nagios products (XI) are in CISA’s catalog of exploited vulnerabilities. Last added: January 18, 2022.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Nagios category to your radar, or open its page.
- Monitoring, ITSM and asset management 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- XI4 vulnerabilities, Monitoring and ITSM
Name used by CISA: Nagios. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Nagios list.
- Rank 1
Nagios XICVE-2021-25296
Nagios XI OS Command Injection
CVSS severity 8.8high
Added Jan 18, 2022
- Rank 2
Nagios XICVE-2021-25297
Nagios XI OS Command Injection
CVSS severity 8.8high
Added Jan 18, 2022
- Rank 3
Nagios XICVE-2021-25298
Nagios XI OS Command Injection
CVSS severity 8.8high
Added Jan 18, 2022
- Rank 4
Nagios XICVE-2019-15949
Nagios XI Remote Code Execution Vulnerability
CVE from 2019, added in 2021
CVSS severity 8.8high
Added Nov 3, 2021
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.