If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 12, 2026 · 16:30via CVEFeed

CVE-2026-48550 - Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter

Brief

CVE ID : CVE-2026-48550

Published : Aug. 12, 2026, 4:30 p. m.

  • 34 minutes ago

Description : Nagios Core before 4.

  • 14 and Nagios XI before 2026R1. 7 are vulnerable to reflected cross-site scripting in cmd. cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim's browser.

Severity: 6.1

  • MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-48550