PT-2025-53774

CVE-2025-67254

·

Published

2025-12-16

·

Updated

2026-10-13

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions NagiosXI version 2026R1.0.1 build 1762361101
Description NagiosXI version 2026R1.0.1 build 1762361101 contains a Directory Traversal flaw in the /admin/coreconfigsnapshots.php file. This allows potential unauthorized access to files outside the intended directory.
Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /admin/coreconfigsnapshots.php file.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2025-67254
BDU:2026-00419
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com