CVE-2026-48551 - Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie
Brief
CVE ID : CVE-2026-48551
Published : Aug. 12, 2026, 4:32 p. m.
- 32 minutes ago
Description : Nagios Core before 4.
- 14 and Nagios XI before 2026R1. 7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling unauthenticated attackers to run commands as authorized users via malicious links.
Severity: 7.4
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...