← back
CVE-2024-24401

CVE-2024-24401

CVSS 9.8 CRITICALEPSS 45.9%CWE-89
SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 2
githubgithub.com/MAWK0235/CVE-2024-24401★ 36githubgithub.com/JIBEG-UNIX/CVE-2024-24401★ 0
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.nagios.com/changelog/