All 5 CVE vulnerabilities found in Nagios Core, with AI-generated Chinese analysis, references, and POCs.
Vendor: Nagios Enterprises, LLC.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-48554 | Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution CWE-78 | 7.5 | High | 2026-08-12 |
| CVE-2026-48553 | Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection CWE-78 | 7.5 | High | 2026-08-12 |
| CVE-2026-48552 | Nagios Core / XI DOM-based XSS via jsonquery.js CWE-79 | 5.4 | Medium | 2026-08-12 |
| CVE-2026-48551 | Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie CWE-352 | 7.4 | High | 2026-08-12 |
| CVE-2026-48550 | Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter CWE-79 | 6.1 | Medium | 2026-08-12 |
All 5 known CVE vulnerabilities affecting Nagios Core with full Chinese analysis, references, and POCs where available.