CVE-2013-10072: Nagios XI

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations.

Affected products

• Nagios Nagios XI: up to and including 2011; version 2012 only

Published 2025-10-30. Last modified 2026-06-16.