CVE-2021-25297

Nagios XI suffered an OS command injection vulnerability that allowed attackers to execute arbitrary commands on the server.

Nagios XI contained an OS command injection flaw enabling remote code execution, a critical failure for DIB organizations relying on monitoring infrastructure. The vulnerability was actively exploited in the wild, indicating negligent patching or poor security hygiene. Organizations must ensure Nagios XI is patched to the latest version and restrict command execution capabilities to prevent similar compromises.

Shame score — The vulnerability was actively exploited in the wild, demonstrating a failure to patch known issues and exposing monitoring systems to remote code execution.