NVD disclosure day
CVE-2025-34286
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Nagios XI's Core Config Manager, allowing an authenticated administrator to execute arbitrary commands on the server by exploiting improper parameter handling in the Run Check command. This could lead to unauthorized control of the host operating system. The reader should care because
CVE-2025-34284
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability exists in the Nagios XI WinRM plugin, allowing an authenticated administrator to execute arbitrary commands. This could result in unauthorized modifications, data exfiltration, or disruption of monitoring services. Confirmation of relevance and exposure is recommended.
CVE-2025-34277
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A code injection vulnerability in Nagios Log Server allows attackers to execute arbitrary code by providing malformed dashboard IDs. This could impact the integrity and availability of log server operations and data.
CVE-2025-34274
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Nagios Log Server contains a vulnerability where its Logstash process runs with root privileges, allowing an attacker who compromises Logstash to execute code as root and gain full system control. This risk arises because Logstash can accept untrusted input, making it a target for exploitation. The issue is mitigated b
CVE-2025-34134
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Nagios XI contains a remote code execution vulnerability in its Business Process Intelligence component, allowing an authenticated administrator to overwrite files and potentially execute arbitrary code as the web application user. This could lead to unauthorized command execution and further control of the host operat
CVE-2024-14009
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A privilege escalation vulnerability exists in Nagios XI's System Profile component, allowing an authenticated administrator to execute commands outside the application's security scope. This could result in unauthorized root privileges on the server, impacting the integrity of the monitoring system. Confirming the use
CVE-2024-14008
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A remote command execution vulnerability exists in Nagios XI's WinRM Configuration Wizard due to insufficient input validation, potentially allowing an authenticated administrator to inject shell metacharacters and execute arbitrary commands with the web application user's privileges. This poses a risk to system data i
CVE-2024-14005
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability in the Nagios XI Docker Wizard allows an authenticated administrator to execute arbitrary commands by exploiting insufficient input validation. This could compromise the Nagios XI system's integrity and operational functionality.
CVE-2024-14003
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Nagios XI allows unauthenticated attackers to execute arbitrary commands on the host system via the NRDP server plugins. This occurs due to insufficient validation of inbound request parameters. If this technology is in use and reachable, it could impact the integrity and availability of the
CVE-2024-13996
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Nagios XI allows existing user sessions to remain active after a password change, potentially enabling continued unauthorized access to user data and actions. This could allow attackers with an active session to maintain access even after credentials are updated.
CVE-2025-3356
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A directory traversal vulnerability in IBM Tivoli Monitoring allows unauthenticated remote attackers to access and modify system files. Attackers can send crafted URLs to view, overwrite, or append arbitrary files, impacting system integrity and confidentiality.
CVE-2025-43027
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical flaw in Genetec Security Center's ALPR Manager role may permit attackers to gain administrative control. Although not known to be exploited, this vulnerability could impact system integrity and availability if reachable. Security and infrastructure teams should verify the role's use and network exposure.
CVE-2025-40099
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's CIFS client could allow a malicious SMB server to cause a system crash or unauthorized access to information by sending malformed data. This affects systems using the kernel's file sharing protocol, with potential impacts on service availability and integrity.