CVE-2025-56432
A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in us…
Published: 2025-08-26 · CVSS: 6.1 · CVSS 3.1
A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-related data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7