CVE-2023-7317: Nagios XI

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of sensitive information.

Affected products

• Nagios Nagios XI: before 2024 (fixed in 2024)

Published 2025-10-30. Last modified 2026-06-17.