Beveiligingsadvies

CVE-2026-48548

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-26 15:33:59

Laatst bijgewerkt 2026-08-26 17:29:31

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently authenticated user without their knowledge or consent.

← Alle CVE's bekijken Bekijk op cve.org ↗