CVE-2021-40343: Nagios XI

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py file allow the nagios user to elevate their privileges to the root user.

Affected products

• Nagios Nagios XI: version 5.8.5 only

Published 2021-10-26. Last modified 2026-06-17.