CVE-2021-37347: Nagios XI

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argument.

Affected products

• Nagios Nagios XI: before 5.8.5 (fixed in 5.8.5)

Published 2021-08-13. Last modified 2026-06-17.