CVE-2024-13986highCWE-22CWE-434

CVE-2024-13986: high-severity vulnerability in Nagios XI

Nagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE

Published · Updated

Follow this CVE+ Monitor XI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 1.7%
Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename operations. Exploitation results in the placement of attacker-controlled PHP files in a web-accessible directory, executed as the www-data user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Nagios · Nagios XI
Related CVEs — Nagios XI

In the same product, most dangerous first.

CVE-2018-15708—CVE-2018-15708EPSS 89.4%CVE-2018-15712—CVE-2018-15712EPSS 48.6%CVE-2018-15710—CVE-2018-15710EPSS 38.2%CVE-2018-15711—CVE-2018-15711EPSS 36.0%CVE-2025-34227HIGHNagios XI < 2026R1 Configuration Wizard Authenticated Command InjectionEPSS 26.5%CVE-2018-15709—CVE-2018-15709EPSS 21.0%