CVE-2024-13997: Nagios XI

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system.

Affected products

• Nagios Nagios XI: before 2024 (fixed in 2024); version 2024 only

Published 2025-11-03. Last modified 2026-09-30.