CVE-2024-24401: Nagios XI

Critical severity, CVSS 9.8. EPSS: 45.9% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component.

Affected products

• Nagios Nagios XI: version 2024 only

Published 2024-02-26. Last modified 2026-06-17.