CVE-2008-5028: Nagios

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.

Affected products

• Nagios Nagios: up to and including 3.0.4; version 1.0 only; version 1.0_b1 only; version 1.0_b2 only; version 1.0_b3 only; version 1.0b1 only; …
• OP5 Monitor: up to and including 4.0.0; version 2.4 only; version 2.6 only; version 2.8 only; version 3.0 only; version 3.0.0 only; …

Published 2008-11-10. Last modified 2026-06-16.