CVE-2021-37349

—

CVSS 3.1

7.8 high

EPSS

<1%p50

Published

Aug 13, 2021 (Aug 13, 2021)

Modified

Jun 17, 2026

Description

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database.

Vendors: nagios
Products: nagios xi
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

60

Flaws in Nagios Network Management systems pose risk to companies

Security AffairsSep 22, 15:08 UTC · Sep 22, 2021Exploit / PoC CVE-2021-37353 CVE-2021-37352 CVE-2021-37351+8 CVEs

60