ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2025-28131

—
CVSS 3.1
4.6 medium
EPSS
<1%p33
Published
()
Modified
Description

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.

Vendors
nagios
Products
network analyzer
Weakness
CWE-285
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.