CVE-2025-34227 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, an…
High CVSS: 8.6

CVE-2025-34227

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.
Vendor
Nagios
Product
Nagios Xi
CWE
CWE-78
Yayın Tarihi
2025-09-25 17:15:38
Güncelleme
2025-10-14 19:53:44
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-78 Nagios Xi HIGH Nagios 2025

Referanslar

https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/ https://www.nagios.com/changelog/ https://www.nagios.com/products/security/ https://www.vulncheck.com/advisories/nagios-xi-config-wizard-auth-command-injection