Vulnerabilities & PatchesEmerging1 src
CVE-2026-48550 - Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter
CVE ID : CVE-2026-48550
Published : Aug. 12, 2026, 4:30 p. m.
• 34 minutes ago
Description : Nagios Core before 4. 5. 14 and Nagios XI before 2026R1. 7 are vulnerable to reflected cross-site scripting in cmd. cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim's browser.
Severity: 6.1
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...