Brand
Nagios: actively exploited vulnerabilities
4 vulnerabilities in Nagios products (XI) are in CISA’s catalog of exploited vulnerabilities. Last added: January 18, 2022.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Nagios category to your radar, or open its page.
- Monitoring, ITSM and asset management 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- XI 4 vulnerabilities · Monitoring and ITSM
Name used by CISA: Nagios. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Nagios list.
Rank 1Nagios XI
CVE-2021-25296Nagios XI OS Command Injection
Added more than a year ago: ranked by severity.
- Added
- Jan 18, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 2Nagios XI
CVE-2021-25297Nagios XI OS Command Injection
Added more than a year ago: ranked by severity.
- Added
- Jan 18, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 3Nagios XI
CVE-2021-25298Nagios XI OS Command Injection
Added more than a year ago: ranked by severity.
- Added
- Jan 18, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 4Nagios XI
CVE-2019-15949CVE from 2019, added in 2021
Nagios XI Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.