PT-2025-53775
CVE-2025-67255
·
Published
2025-12-16
·
Updated
2026-10-13
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
NagiosXI version 2026R1.0.1 build 1762361101
Description
Dashboard parameters in the software do not have sufficient filtering, which allows authenticated users to exploit a SQL Injection issue. The vulnerability allows unauthorized access to the database through crafted requests to the dashboard.
Recommendations
Apply proper filtering to dashboard parameters to prevent SQL Injection attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾