Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

340 matches found

NVD
NVD•added 2026/08/26 4:16 p.m.•27 views

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS0.00212EPSS
SaveExploits0References3
NVD
NVD•added 2026/08/26 4:16 p.m.•24 views

CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS0.00256EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2026/08/26 4:16 p.m.•25 views

UBUNTU-CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2026/08/26 4:16 p.m.•22 views

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve•added 2026/08/26 4:16 p.m.•25 views

CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.2AI score0.00256EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/08/26 4:16 p.m.•23 views

UBUNTU-CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.1AI score0.00256EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/08/26 3:37 p.m.•47 views

CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS0.00256EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/08/26 3:37 p.m.•17 views

CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.1AI score0.00256EPSS
SaveExploits0References3
CVE
CVE•added 2026/08/26 3:37 p.m.•43 views

CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are affected by a CSRF vulnerability in cmd.cgi . The root cause is that when no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a ...

6.9CVSS6.1AI score0.00256EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/08/26 3:37 p.m.•19 views

EUVD-2026-66599

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.2AI score0.00256EPSS
SaveExploits0References3
Mend
Mend•added 2026/08/26 3:37 p.m.•10 views

CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.1AI score0.00256EPSS
SaveExploits0References5
osv_cve
osv_cve•added 2026/08/26 3:37 p.m.•28 views

CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.2AI score
SaveExploits0References5
Debian CVE
Debian CVE•added 2026/08/26 3:37 p.m.•19 views

CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

6.9CVSS6.1AI score0.00256EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/08/26 3:33 p.m.•45 views

CVE-2026-48548 Nagios Core CSRF via cmd.cgi

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS0.00212EPSS
SaveExploits0References3
osv_cve
osv_cve•added 2026/08/26 3:33 p.m.•20 views

CVE-2026-48548 Nagios Core CSRF via cmd.cgi

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References5
CVE
CVE•added 2026/08/26 3:33 p.m.•85 views

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery (CSRF) vulnerability in cmd.cgi . The root cause is that the CSRF protection mechanism passes validation when the NagFormId cookie is absent, allowing an attacker to craft a malicious cross-site POST request to execute arbitrary Nagi...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References3
Mend
Mend•added 2026/08/26 3:33 p.m.•11 views

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/08/26 3:33 p.m.•20 views

EUVD-2026-66598

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/08/26 3:33 p.m.•17 views

CVE-2026-48548

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/08/26 3:33 p.m.•17 views

CVE-2026-48548 Nagios Core CSRF via cmd.cgi

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently...

6.9CVSS6.5AI score0.00212EPSS
SaveExploits0References3
Rows per page
Query Builder