CVE-2022-29271: Nagios XI

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks.

Affected products

• Nagios Nagios XI: up to and including 5.8.5

Published 2022-06-29. Last modified 2026-06-17.