CVE-2021-47700: Nagios XI

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code execution depending on deployment.

Affected products

• Nagios Nagios XI: before 5.8.7 (fixed in 5.8.7)

Published 2025-10-30. Last modified 2026-06-17.