Vulnerabilities fixed in Nagios XI

Nagios has fixed vulnerabilities in Nagios XI Versions before 2024R1.4.2 and 2024R2. The vulnerabilities include a remote code execution vulnerability within the Business Process Intelligence component, insufficient permissions on systemd unit files, unauthorized access to API keys, a command...

EUVD-2025-37213

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

PT-2025-44522

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R2 Description Nagios XI versions prior to 2024R2 have a command injection issue in the WinRM plugin. A lack of proper validation of user-supplied parameters allows an authenticated administrator to inject shell...

CVE-2025-34284: Improper Neutralization of Special Elements used in an OS Command

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

org.rundeck-plugins:rundeck-plugins-parent (3), org.rundeck-plugins:rundeck-winrm-plugin (>=1.3.1, <=1.3.3) potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (2.3.2)

org.rundeck:rundeck-core MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - org.rundeck-plugins:rundeck-plugins-parent 3 - org.rundeck-plugins:rundeck-winrm-plugin =1.3.1, =1.3.3 Source...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...

org.rundeck-plugins:rundeck-plugins-parent (3), org.rundeck-plugins:rundeck-winrm-plugin (>=1.3.1, <=1.3.3) potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (2.3.2)

org.rundeck:rundeck-core MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - org.rundeck-plugins:rundeck-plugins-parent 3 - org.rundeck-plugins:rundeck-winrm-plugin =1.3.1, =1.3.3 Source...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...