high8.8

CVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.

Impact

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.

Affected products

Vendor	Product	Affected versions
Nagios	Nagios Xi	Version 2026

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://github.com/YongYe-Security/NagiosXI/tree/main
https://www.nagios.org/