Nagios vendor intelligence

Nagios Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Nagios products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse Nagios KEVs Full KEV feed

Total KEVs: 5; Known exploited vulnerabilities affecting Nagios products
In CISA KEV: 4; Records also listed in the official catalog
Beyond CISA KEV: 1; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; Nagios KEVs with sensor-observed exploitation activity

The catalog gap matters for Nagios exposure

One of the five exploited Nagios CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss one-fifth of this vendor portfolio.

80%
Covered by CISA: 20%
Beyond CISA: 2
Product families

Attested Nagios CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2018-10737 A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.	XI	High	Beyond CISA	25 Apr 2025
CVE-2019-15949 Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the...	XI	Confirmed	In CISA	03 Nov 2021
CVE-2021-25298 Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file...	Nagios XI	Confirmed	In CISA	18 Jan 2022
CVE-2021-25297 Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file...	Nagios XI	Confirmed	In CISA	18 Jan 2022
CVE-2021-25296 Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file...	Nagios XI	Confirmed	In CISA	18 Jan 2022

Showing 5 of 5 Nagios known exploited vulnerabilities.

Recurring weakness patterns

Neutralization and neutralization account for four mapped occurrences across this Nagios KEV portfolio.

Browse all KEVs →

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.