PT-2025-44509

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R1.0.2 Description The software contains a local privilege escalation issue. An attacker with the ability to execute commands as the Apache web user or the backend shell user can gain root access on the...

PT-2025-44556

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.0.2 Description Nagios XI versions prior to 2024R1.0.2 are susceptible to cross-site scripting XSS through the Nagios Core Command Expansion page. The issue stems from inadequate validation or escaping of...