https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:25:45.892683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-13992 CVE-2024-13992 — Nagios XI < 2024R1.1 XSS via Missing Page / 404 2026-10-08T00:25:45.909440+00:00

Affected: Nagios XI

Nagios XI versions prior to < 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the "missing page" (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.