FAIL › dossier
Nagios XI
PRODUCT· dossier confidence 20%
Nagios XI, a network monitoring solution, has faced recurring vulnerabilities, including remote code execution, that have not been adequately addressed.
PROFILE
CategoryMonitoring SoftwareWhat they doNagios XI is a flagship commercial network monitoring solution by Nagios, Inc. It provides monitoring for network hardware, servers, applications, and services.
Websitehttps://www.nagios.com/products/nagios-xi/ ↗
SECURITY POSTURE
Nagios XI has been identified with multiple vulnerabilities that could lead to remote code execution and OS command injection.
Notable failures
- CVE-2021-25298: High [RCE]
- CVE-2021-25297: High [RCE]
- CVE-2021-25296: High [RCE]
- CVE-2019-15949: High [RCE]
Patterns: Repeated unpatched edge-device RCEs; Lack of security awareness training among users
FAILURE HISTORY · 8
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-01-18 | CVE-2021-25297 | high | Nagios XI suffered an OS command injection vulnerability that allowed attackers to execute arbitrary commands on the server. |
| 2022-01-18 | CVE-2021-25296 | high | Nagios XI suffered an OS command injection vulnerability that allowed attackers to execute arbitrary commands on the server. |
| 2021-11-03 | CVE-2019-15949 | high | Nagios XI allowed attackers to modify the check_plugin executable and execute arbitrary commands as root. |
| 2022-01-18 | CVE-2021-25298 | high | Nagios XI suffered an OS command injection vulnerability that was actively exploited in the wild. |
| 2025-10-30 | CVE-2024-13994 | critical | CVE-2024-13994: Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control w |
| 2025-10-30 | CVE-2024-13996 | critical | CVE-2024-13996: Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessi |
| 2025-10-30 | CVE-2024-14003 | critical | CVE-2024-14003: Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RC |
| 2025-10-30 | CVE-2024-13999 | critical | CVE-2024-13999: Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose th |
DOSSIER SOURCES
- Nagios Support Forum - Index page · support.nagios.com
- Profile - CRDO - NASDAQ - Weiss Ratings · weissratings.com
- Computer Security Global Security Mag Online anti virus spywares job ... · www.globalsecuritymag.com
- Nagios Support Forum - Index page · support.nagios.com
- NagiosXI <= 5.4.12 `commandline.php` SQL injection · vulners.com
- FOG Project CVE-2026-47687 (HIGH 7.3) - vuln.today · vuln.today
Open questions: How has Nagios addressed the identified security vulnerabilities? · What is the current security posture of Nagios XI?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-23 03:41:24.511792+00:00