https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:10:42.296035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361251 EUVD-2026-361251 2026-10-07T19:10:42.370153+00:00 EUVD-2026-361251 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48549 fkie_cve-2026-48549 2026-10-07T19:10:42.370198+00:00

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute Nagios commands as a currently authenticated user.

 https://cve.radiocsirt.org/vuln/ghsa-xm5q-p2r5-r5wj GHSA-xm5q-p2r5-r5wj 2026-10-07T19:10:42.370234+00:00

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute Nagios commands as a currently authenticated user.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48549 UBUNTU-CVE-2026-48549 2026-10-07T19:10:42.370251+00:00

Affected: Ubuntu:20.04:LTS: nagios4, Ubuntu:22.04:LTS: nagios4, Ubuntu:24.04:LTS: nagios4, Ubuntu:26.04:LTS: nagios4

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute Nagios commands as a currently authenticated user.