CVE-2021-3273: Nagios XI

High severity, CVSS 7.2. EPSS: 7.2% chance of exploitation in the next 30 days.

Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system.

Affected products

• Nagios Nagios XI: before 5.7 (fixed in 5.7)

Published 2021-02-25. Last modified 2026-06-17.