CVE-2008-5027: Nagios

Medium severity, CVSS 6.5. EPSS: 6.7% chance of exploitation in the next 30 days.

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.

Affected products

• Nagios Nagios: up to and including 3.0.4; version 1.0 only; version 1.0_b1 only; version 1.0_b2 only; version 1.0_b3 only; version 1.0b1 only; …
• OP5 Monitor: up to and including 4.0.0; version 2.4 only; version 2.6 only; version 2.8 only; version 3.0 only; version 3.0.0 only; …

Published 2008-11-10. Last modified 2026-06-16.