Skip to main content

Nagios Core CVE-2026-48552

| EUVDEUVD-2026-57327 MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2026-08-12 VulnCheck GHSA-m927-w885-wph8
XSS Nagios Core Nagios Xi Suse
5.1
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
5.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.4 MEDIUM

Network-delivered stored XSS requires low-privileged write access (PR:L) and victim browser interaction (UI:R); scope changes to victim's browser session (S:C) with limited confidentiality and integrity impact only.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
SUSE
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 12, 2026 - 17:06 vuln.today
CVE Published
Aug 12, 2026 - 16:34 cve.org
MEDIUM 5.1

DescriptionCVE.org

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fields are inserted into the DOM without sanitization, allowing attackers to run arbitrary JavaScript in the victim's browser.

AnalysisAI

DOM-based cross-site scripting in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows an authenticated low-privileged attacker to execute arbitrary JavaScript in the browser of any user who views pages rendered by the vulnerable jsonquery.js component. The flaw is stored rather than reflected, meaning injected payloads persist server-side and activate without requiring a victim to follow a crafted link. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires the attacker to hold at least a low-privileged authenticated account in Nagios Core or Nagios XI - the CVSS 4.0 vector (PR:L) confirms that unauthenticated exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 5.1 accurately reflects a moderate but not critical threat profile: low attack complexity and no special attack conditions (AC:L/AT:N) lower the bar for exploitation, while required low privileges (PR:L) and passive victim interaction (UI:P) prevent fully automated, unauthenticated mass compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade Nagios Core to version 4.5.14 or later and Nagios XI to version 2026R1.7 or later; both patches are confirmed available per the vendor security disclosure at https://www.nagios.com/security-disclosures/nagios-core/ and corroborated by VulnCheck at https://www.vulncheck.com/advisories/nagios-core-xi-dom-based-xss-via-jsonquery-js. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Nagios Core

View all
CVE-2018-13458 MEDIUM POC
5.5 Jul 12

qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to
CVE-2018-13457 MEDIUM POC
5.5 Jul 12

qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to
CVE-2018-18245 MEDIUM POC
5.4 Dec 17

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered
CVE-2020-35269 HIGH
8.8 Dec 23

Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, li
CVE-2017-14312 HIGH
7.8 Sep 11

Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this f
CVE-2026-48554 HIGH
7.7 Aug 12

Remote code execution in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows authenticated UI users to ru
CVE-2026-48553 HIGH
7.7 Aug 12

Authenticated remote code execution in Nagios Core (before 4.5.13) and Nagios XI (before 2026R1.5) is achievable via OS

CVE-2026-48549 MEDIUM
6.9 Aug 26

Cross-site request forgery in Nagios Core (before 4.5.13) and Nagios XI (before 2026R1.5) allows an attacker to execute

CVE-2026-48548 MEDIUM
6.9 Aug 26

Cross-site request forgery in Nagios Core before 4.5.12 enables remote attackers to execute arbitrary monitoring command
CVE-2026-48551 MEDIUM
6.1 Aug 12

Cross-site request forgery protection bypass in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows unaut
CVE-2026-48550 MEDIUM
5.1 Aug 12

Reflected cross-site scripting in Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 allows unauthenticated remote

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2016-8581 MEDIUM POC
6.1
CVE-2013-5223 MEDIUM POC
5.4
CVE-2025-52367 MEDIUM POC
5.4

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Share

CVE-2026-48552 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy